Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2025-21291HIGHWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.4%CVE-2020-1686HIGHJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.EPSS 1.4%CVE-2021-34768HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-34769HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2022-2519—There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1EPSS 1.3%CVE-2023-29469MEDIUMAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.cEPSS 1.3%CVE-2022-40507HIGHDouble free in CoreEPSS 1.3%CVE-2021-1565HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.3%CVE-2023-44247MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or EPSS 1.2%CVE-2026-97749CRITICALMicrosoft Office Outlook Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-27794—A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memEPSS 1.1%CVE-2024-2002HIGHLibdwarf: crashes randomly on fuzzed objectEPSS 1.1%CVE-2023-38562HIGHA double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafteEPSS 1.1%CVE-2026-8925CRITICALSASL double-freeEPSS 1.1%CVE-2026-97830HIGHWindows Internet Information Services Denial of Service VulnerabilityEPSS 1.1%CVE-2023-45666HIGHPossible double-free or memory leak in stbi__load_gif_main in stb_imageEPSS 1.1%CVE-2021-34333—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.1%CVE-2023-41678HIGHA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker toEPSS 1.1%CVE-2022-20803HIGHClamAV Double-free Vulnerability in the OLE2 File ParserEPSS 1.1%CVE-2022-3806CRITICALBluetooth HCI Error Handling Double FreeEPSS 1.0%