Falhas do tipo CWE-590
20 resultadosLiberação de memória não alocada no heap
Ocorre quando código tenta liberar (free, delete) memória que não foi alocada dinamicamente no heap, como variáveis locais na pilha ou ponteiros inválidos. Isso corrompe o gerenciador de memória e causa crashes ou comportamento indefinido.
Exemplo
Um programa aloca um buffer local na pilha (char buf[100]) e depois tenta fazer free(buf) como se fosse heap. Ou recebe um ponteiro de origem desconhecida e chama delete sem verificar se realmente veio de malloc/new.
Como mitigar
Rastreie a origem de cada ponteiro e libere apenas o que você mesmo alocou no heap. Use análise estática (Clang Static Analyzer, Valgrind) para detectar mismatches free/malloc. Em C++, prefira smart pointers (unique_ptr, shared_ptr) que gerenciam liberação automaticamente.
CVE-2020-6016—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveEPSS 5.8%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.4%CVE-2021-42377—An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafteEPSS 3.4%CVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.0%CVE-2023-25565HIGHGSS-NTLMSSP vulnerable to incorrect free when decoding target informationEPSS 1.1%CVE-2025-32911CRITICALLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueEPSS 0.9%CVE-2023-42459HIGHMalformed DATA submessage leads to bad-free error in Fast-DDSEPSS 0.8%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18582MEDIUMmz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapEPSS 0.5%CVE-2026-20810HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-22291HIGHAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document canEPSS 0.5%CVE-2025-42994HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2021-3939HIGHFree of static data in accountsserviceEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%CVE-2021-39218MEDIUMOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeEPSS 0.3%CVE-2025-42996MEDIUMMultiple vulnerabilities in SAP MDM ServerEPSS 0.2%CVE-2025-5899MEDIUMGNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapEPSS 0.1%CVE-2025-7006MEDIUMAvast antivirus use of stack memory after free when scanning a malformed PE fileEPSS 0.1%CVE-2026-47328MEDIUMInvalid pointer deallocation in Ubuntu Linux AppArmor notification handlingEPSS 0.1%