Fallos del tipo CWE-415

312 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar ou usar um bloco de memória que já foi liberado (free/delete). O programa continua referenciando um ponteiro inválido, levando a comportamento impreditível: corrupção de dados, execução arbitrária ou travamento. É uma das falhas mais críticas em linguagens de baixo nível como C e C++.

Ejemplo

Um serviço web aloca memória para armazenar dados de sessão de um cliente, libera quando a sessão encerra, mas uma thread em segundo plano tenta ler essa sessão novamente sem verificar se ainda é válida. Um atacante pode explorar a corrupção resultante para escrever código malicioso naquele espaço de memória.

Cómo mitigar

Use linguagens com gerenciamento automático de memória (Java, Python, Go) ou, em C/C++, adote práticas rigorosas: evite apontadores brutos, use smart pointers (unique_ptr, shared_ptr), implemente validação antes de acessar memória, e realize testes extensivos com ferramentas como AddressSanitizer e Valgrind.

CVE-2018-0469—Cisco IOS XE Software Web UI Denial of Service VulnerabilityEPSS 3.1%CVE-2021-27033HIGHDouble Free File Parsing Vulnerability in Autodesk Design ReviewEPSS 3.0%CVE-2022-42915HIGHcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection EPSS 2.9%CVE-2020-16217—Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fiEPSS 2.9%CVE-2019-5797HIGHDouble free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 2.8%CVE-2021-31449HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 2.8%CVE-2023-33137HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.7%CVE-2020-1647CRITICALJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabledEPSS 2.6%CVE-2019-5460—Double Free in VLC versions <= 3.0.6 leads to a crash.EPSS 2.5%CVE-2021-23158—A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allEPSS 2.4%CVE-2021-36088CRITICALFluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).EPSS 2.4%CVE-2021-42533HIGHAdobe Bridge DCM File Parsing Double Free Remote Code Execution VulnerabilityEPSS 2.1%CVE-2018-8835—Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allEPSS 2.1%CVE-2021-4091—A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series ofEPSS 2.0%CVE-2025-21201HIGHWindows Telephony Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2021-46621HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 1.9%CVE-2021-46625HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2020-3179HIGHCisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service VulnerabilityEPSS 1.9%CVE-2020-11044LOWDouble Free in FreeRDPEPSS 1.9%CVE-2022-2509HIGHA vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures inEPSS 1.9%