Falhas do tipo CWE-763

59 resultados

Liberação de ponteiro ou referência inválido

Ocorre quando o código tenta liberar (desalocar) memória usando um ponteiro que não aponta para uma alocação válida — pode ser um ponteiro nulo, já liberado, ou que nunca foi alocado. Isso causa corrupção de memória, crash da aplicação ou comportamento imprevisível.

Exemplo

Um programa aloca memória para uma estrutura, mas por erro de lógica libera o mesmo bloco duas vezes (double-free), ou tenta liberar um ponteiro local da stack. Na segunda liberação, o gerenciador de memória detecta corrupção ou o ponteiro referencia dado já reescrito.

Como mitigar

Sempre validar que o ponteiro é válido antes de liberar (nunca assume que é safe); use padrões como RAII ou smart pointers (em C++); defina ponteiros como nullptr após free; revise fluxos de alocação/desalocação com ferramentas de análise estática (como Clang Static Analyzer ou Valgrind).

CVE-2019-11930—An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVEPSS 3.2%CVE-2021-3682—A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulEPSS 2.9%CVE-2025-25215HIGHDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityEPSS 2.7%CVE-2021-21401HIGHInvalid free() call in NanopbEPSS 1.8%CVE-2020-5139—A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InEPSS 1.8%CVE-2021-24028—An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other unEPSS 1.7%CVE-2022-2521—It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522EPSS 1.3%CVE-2021-22760—A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulEPSS 1.2%CVE-2026-83889HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-48431HIGHApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.EPSS 1.0%CVE-2026-97011HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14233CRITICALInvalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on thEPSS 0.8%CVE-2020-27545MEDIUMlibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted EPSS 0.8%CVE-2025-48768MEDIUMApache NuttX RTOS: fs/inode: fs_inoderemove root inode removalEPSS 0.8%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.7%CVE-2026-19315CRITICALFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code ExecutionEPSS 0.7%CVE-2026-74860HIGHLibxml2: double-free/uaf in libxml2 python bindingsEPSS 0.7%CVE-2023-0459MEDIUMCopy_from_user Spectre-V1 Gadget in Linux KernelEPSS 0.6%CVE-2023-4883HIGHMultiple vulnerabilities in Open5GSEPSS 0.6%CVE-2024-44852HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetEPSS 0.6%