Weaknesses of type CWE-590

20 results

Liberação de memória não alocada no heap

Ocorre quando o código tenta liberar (free) uma região de memória que não foi alocada dinamicamente no heap, como variáveis locais na stack, ponteiros para dados estáticos ou endereços inválidos. Isso corrompe o gerenciador de memória e causa crash ou comportamento imprevisível.

Example

Um desenvolvedor aloca uma string no stack (char buffer[100]) e depois tenta fazer free(buffer) em C/C++, ou acidentalmente passa um endereço de variável global para delete em C++. O sistema tenta liberar memória que nunca foi requisitada, quebrando as estruturas internas do alocador.

How to mitigate

Use análise estática (AddressSanitizer, Valgrind, ferramentas lint) para detectar mismatches entre alocação e liberação. Prefira RAII em C++ (smart pointers como unique_ptr, shared_ptr) e em linguagens modernas evite manipulação manual de memória. Code review focado em padrões de alocação/desalocação.

CVE-2020-6016—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveEPSS 5.8%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.4%CVE-2021-42377—An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafteEPSS 3.4%CVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.0%CVE-2023-25565HIGHGSS-NTLMSSP vulnerable to incorrect free when decoding target informationEPSS 1.1%CVE-2025-32911CRITICALLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueEPSS 0.9%CVE-2023-42459HIGHMalformed DATA submessage leads to bad-free error in Fast-DDSEPSS 0.8%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18582MEDIUMmz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapEPSS 0.5%CVE-2026-20810HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-22291HIGHAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document canEPSS 0.5%CVE-2025-42994HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2021-3939HIGHFree of static data in accountsserviceEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%CVE-2021-39218MEDIUMOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeEPSS 0.3%CVE-2025-42996MEDIUMMultiple vulnerabilities in SAP MDM ServerEPSS 0.2%CVE-2025-5899MEDIUMGNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapEPSS 0.1%CVE-2025-7006MEDIUMAvast antivirus use of stack memory after free when scanning a malformed PE fileEPSS 0.1%CVE-2026-47328MEDIUMInvalid pointer deallocation in Ubuntu Linux AppArmor notification handlingEPSS 0.1%