Falhas do tipo CWE-763

47 resultados

Liberação de ponteiro ou referência inválido

Ocorre quando o código tenta liberar (desalocar) memória usando um ponteiro que não aponta para uma alocação válida — pode ser um ponteiro nulo, já liberado, ou que nunca foi alocado. Isso causa corrupção de memória, crash da aplicação ou comportamento imprevisível.

Exemplo

Um programa aloca memória para uma estrutura, mas por erro de lógica libera o mesmo bloco duas vezes (double-free), ou tenta liberar um ponteiro local da stack. Na segunda liberação, o gerenciador de memória detecta corrupção ou o ponteiro referencia dado já reescrito.

Como mitigar

Sempre validar que o ponteiro é válido antes de liberar (nunca assume que é safe); use padrões como RAII ou smart pointers (em C++); defina ponteiros como nullptr após free; revise fluxos de alocação/desalocação com ferramentas de análise estática (como Clang Static Analyzer ou Valgrind).

CVE-2026-15718MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2026-19315CRITICALFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code ExecutionEPSS 0.5%CVE-2022-4696HIGHThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is EPSS 0.4%CVE-2024-25074MEDIUMAn issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, ExEPSS 0.4%CVE-2026-22770MEDIUMImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation failsEPSS 0.4%CVE-2026-52993CRITICALtipc: fix double-free in tipc_buf_append()EPSS 0.4%CVE-2026-9516HIGHCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throwsEPSS 0.4%CVE-2026-74860HIGHLibxml2: double-free/uaf in libxml2 python bindingsEPSS 0.4%CVE-2025-13824HIGHMicro820®, Micro850®, Micro870® – Specialized Fuzzing VulnerabilitiesEPSS 0.3%CVE-2020-28941MEDIUMAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the EPSS 0.3%CVE-2026-84131HIGHPrivilege escalation due to invalid pointer in the Graphics componentEPSS 0.3%CVE-2026-77500HIGHWindows Device Association Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-54333MEDIUMAn issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node inEPSS 0.3%CVE-2026-47312MEDIUMRelease of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects EscargEPSS 0.3%CVE-2022-48425HIGHIn the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.EPSS 0.2%CVE-2026-74947HIGHPrivilege escalation due to invalid pointer in the Graphics componentEPSS 0.2%CVE-2023-20511MEDIUMRelease of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentEPSS 0.2%CVE-2026-57248HIGHFoxit PDF Editor/Reader Annotation Improper Release VulnerabilityEPSS 0.2%CVE-2024-25079HIGHA memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 befoEPSS 0.1%CVE-2026-46189HIGHRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pathEPSS 0.1%