Fallos del tipo CWE-415

310 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar ou usar um bloco de memória que já foi liberado (free/delete). O programa continua referenciando um ponteiro inválido, levando a comportamento impreditível: corrupção de dados, execução arbitrária ou travamento. É uma das falhas mais críticas em linguagens de baixo nível como C e C++.

Ejemplo

Um serviço web aloca memória para armazenar dados de sessão de um cliente, libera quando a sessão encerra, mas uma thread em segundo plano tenta ler essa sessão novamente sem verificar se ainda é válida. Um atacante pode explorar a corrupção resultante para escrever código malicioso naquele espaço de memória.

Cómo mitigar

Use linguagens com gerenciamento automático de memória (Java, Python, Go) ou, em C/C++, adote práticas rigorosas: evite apontadores brutos, use smart pointers (unique_ptr, shared_ptr), implemente validação antes de acessar memória, e realize testes extensivos com ferramentas como AddressSanitizer e Valgrind.

CVE-2023-27537—A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without EPSS 1.9%CVE-2022-44640CRITICALHeimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key DistribEPSS 1.8%CVE-2020-11017MEDIUMDouble free in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.8%CVE-2010-3957HIGHDouble free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 EPSS 1.8%CVE-2024-30097HIGHMicrosoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2022-31117MEDIUMDouble free of buffer during string decoding in ujsonEPSS 1.7%CVE-2024-23809CRITICALA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master BrEPSS 1.7%CVE-2024-38087HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.7%CVE-2023-27320HIGHSudo before 1.9.13p2 has a double free in the per-command chroot feature.EPSS 1.7%CVE-2018-0160—A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attackeEPSS 1.7%CVE-2024-22097CRITICALA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) EPSS 1.6%CVE-2024-30013HIGHWindows MultiPoint Services Remote Code Execution VulnerabilityEPSS 1.6%CVE-2021-3492HIGHUbuntu linux kernel shiftfs file system double free vulnerabilityEPSS 1.5%CVE-2022-32574HIGHA double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One SecurEPSS 1.5%CVE-2024-27099CRITICALAzure IoT Platform Device SDK Double Free VulnerabilityEPSS 1.4%CVE-2024-43447HIGHWindows SMBv3 Server Remote Code Execution VulnerabilityEPSS 1.4%CVE-2020-1686HIGHJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.EPSS 1.4%CVE-2021-34769HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-34768HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2025-21291HIGHWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.4%