Falhas do tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2026-43706MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8EPSS 0.4%CVE-2024-10934CRITICALOpenBSD NFS double-free vulnerabilityEPSS 0.4%CVE-2026-18663MEDIUM389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlEPSS 0.4%CVE-2026-44422HIGHFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusionEPSS 0.4%CVE-2026-12659HIGHRockwell Automation Flex 5000® Adapter - Denial of ServiceEPSS 0.4%CVE-2022-50401CRITICALnfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failureEPSS 0.4%CVE-2026-81950HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-39564HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashEPSS 0.4%CVE-2026-10653MEDIUMNon-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unrefEPSS 0.4%CVE-2024-23141HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.4%CVE-2026-21918HIGHJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesEPSS 0.4%CVE-2025-21673CRITICALsmb: client: fix double free of TCP_Server_Info::hostnameEPSS 0.4%CVE-2025-23102HIGHAn issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobilEPSS 0.4%CVE-2021-0271MEDIUMJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.EPSS 0.4%CVE-2023-53360CRITICALNFSv4.2: Rework scratch handling for READ_PLUS (again)EPSS 0.4%CVE-2025-59505HIGHWindows Smart Card Reader Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-14604MEDIUMOpen Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double freeEPSS 0.4%CVE-2025-20134HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service VulnerabilityEPSS 0.4%CVE-2026-33838HIGHWindows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-20863HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.4%