Falhas do tipo CWE-763

39 resultados

Liberação de ponteiro ou referência inválido

Ocorre quando o código tenta liberar (desalocar) memória usando um ponteiro que não aponta para uma alocação válida — pode ser um ponteiro nulo, já liberado, ou que nunca foi alocado. Isso causa corrupção de memória, crash da aplicação ou comportamento imprevisível.

Exemplo

Um programa aloca memória para uma estrutura, mas por erro de lógica libera o mesmo bloco duas vezes (double-free), ou tenta liberar um ponteiro local da stack. Na segunda liberação, o gerenciador de memória detecta corrupção ou o ponteiro referencia dado já reescrito.

Como mitigar

Sempre validar que o ponteiro é válido antes de liberar (nunca assume que é safe); use padrões como RAII ou smart pointers (em C++); defina ponteiros como nullptr após free; revise fluxos de alocação/desalocação com ferramentas de análise estática (como Clang Static Analyzer ou Valgrind).

CVE-2019-11930—An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVEPSS 3.2%CVE-2021-3682—A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulEPSS 2.9%CVE-2025-25215HIGHDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityEPSS 1.9%CVE-2021-21401HIGHInvalid free() call in NanopbEPSS 1.8%CVE-2020-5139—A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InEPSS 1.8%CVE-2021-24028—An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other unEPSS 1.7%CVE-2021-22760—A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulEPSS 1.2%CVE-2025-48431HIGHApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.EPSS 1.1%CVE-2022-2521—It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522EPSS 1.0%CVE-2020-27545MEDIUMlibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted EPSS 0.8%CVE-2025-48768MEDIUMApache NuttX RTOS: fs/inode: fs_inoderemove root inode removalEPSS 0.8%CVE-2025-14233CRITICALInvalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on thEPSS 0.8%CVE-2023-0459MEDIUMCopy_from_user Spectre-V1 Gadget in Linux KernelEPSS 0.6%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.6%CVE-2023-34312HIGHIn Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-proEPSS 0.6%CVE-2024-44852HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetEPSS 0.6%CVE-2024-6607HIGHLeaving pointerlock by pressing the escape key could be preventedEPSS 0.6%CVE-2023-4883HIGHMultiple vulnerabilities in Open5GSEPSS 0.5%CVE-2025-30379HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-11838HIGHWatchGuard Firebox iked Memory Corruption VulnerabilityEPSS 0.5%