Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2025-21183HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-21182HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2020-25637—A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about netEPSS 0.5%CVE-2024-12107HIGHDouble Free in µD3TNEPSS 0.5%CVE-2026-89078CRITICALDouble Free in GitLabEPSS 0.5%CVE-2026-18663MEDIUM389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlEPSS 0.5%CVE-2024-20498HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%CVE-2023-45679HIGHAttempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbisEPSS 0.5%CVE-2024-3187MEDIUMThis issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are causeEPSS 0.5%CVE-2021-25477MEDIUMAn improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.EPSS 0.5%CVE-2021-3564—A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI EPSS 0.5%CVE-2025-26640HIGHWindows Digital Media Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-38157HIGHAzure IoT SDK Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-45402HIGHPicotls double freeEPSS 0.5%CVE-2026-20832HIGHWindows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-75159HIGHMongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process TerminationEPSS 0.5%CVE-2026-81950HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-33952MEDIUMKernel: vmwgfx: double free within the handling of vmw_buffer_object objectsEPSS 0.5%CVE-2025-5262HIGHA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This couEPSS 0.5%CVE-2026-11576HIGHThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanEPSS 0.5%