Falhas do tipo CWE-590
26 resultadosLiberação de memória não alocada no heap
Ocorre quando código tenta liberar (free, delete) memória que não foi alocada dinamicamente no heap, como variáveis locais na pilha ou ponteiros inválidos. Isso corrompe o gerenciador de memória e causa crashes ou comportamento indefinido.
Exemplo
Um programa aloca um buffer local na pilha (char buf[100]) e depois tenta fazer free(buf) como se fosse heap. Ou recebe um ponteiro de origem desconhecida e chama delete sem verificar se realmente veio de malloc/new.
Como mitigar
Rastreie a origem de cada ponteiro e libere apenas o que você mesmo alocou no heap. Use análise estática (Clang Static Analyzer, Valgrind) para detectar mismatches free/malloc. Em C++, prefira smart pointers (unique_ptr, shared_ptr) que gerenciam liberação automaticamente.
CVE-2020-6016—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveEPSS 6.0%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.8%CVE-2021-42377—An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafteEPSS 3.6%CVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.1%CVE-2023-25565HIGHGSS-NTLMSSP vulnerable to incorrect free when decoding target informationEPSS 1.1%CVE-2023-42459HIGHMalformed DATA submessage leads to bad-free error in Fast-DDSEPSS 1.0%CVE-2025-32911CRITICALLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueEPSS 1.0%CVE-2026-18582MEDIUMmz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapEPSS 0.9%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-20810HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-76465CRITICALCisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-22291HIGHAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document canEPSS 0.5%CVE-2025-42994HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.5%CVE-2026-68908MEDIUMlibIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send pathEPSS 0.5%CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2026-106578MEDIUMImageMagick: Invalid Memory Free in MVG decoderEPSS 0.4%CVE-2021-3939HIGHFree of static data in accountsserviceEPSS 0.4%CVE-2026-95311CRITICALFree of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiaEPSS 0.3%CVE-2026-94370MEDIUMMemory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUsEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%