Fallos del tipo CWE-415

310 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar ou usar um bloco de memória que já foi liberado (free/delete). O programa continua referenciando um ponteiro inválido, levando a comportamento impreditível: corrupção de dados, execução arbitrária ou travamento. É uma das falhas mais críticas em linguagens de baixo nível como C e C++.

Ejemplo

Um serviço web aloca memória para armazenar dados de sessão de um cliente, libera quando a sessão encerra, mas uma thread em segundo plano tenta ler essa sessão novamente sem verificar se ainda é válida. Um atacante pode explorar a corrupção resultante para escrever código malicioso naquele espaço de memória.

Cómo mitigar

Use linguagens com gerenciamento automático de memória (Java, Python, Go) ou, em C/C++, adote práticas rigorosas: evite apontadores brutos, use smart pointers (unique_ptr, shared_ptr), implemente validação antes de acessar memória, e realize testes extensivos com ferramentas como AddressSanitizer e Valgrind.

CVE-2024-49014HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.3%CVE-2022-40507HIGHDouble free in CoreEPSS 1.3%CVE-2021-1565HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.3%CVE-2023-44247MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or EPSS 1.2%CVE-2023-39975HIGHkdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger anEPSS 1.2%CVE-2025-32988MEDIUMGnutls: vulnerability in gnutls othername san exportEPSS 1.2%CVE-2024-2002HIGHLibdwarf: crashes randomly on fuzzed objectEPSS 1.1%CVE-2023-35371HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-38562HIGHA double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafteEPSS 1.1%CVE-2023-41678HIGHA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker toEPSS 1.1%CVE-2022-20803HIGHClamAV Double-free Vulnerability in the OLE2 File ParserEPSS 1.1%CVE-2023-29469MEDIUMAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.cEPSS 1.0%CVE-2022-3806CRITICALBluetooth HCI Error Handling Double FreeEPSS 1.0%CVE-2024-26257HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-2519—There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1EPSS 1.0%CVE-2023-36420HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-45666HIGHPossible double-free or memory leak in stbi__load_gif_main in stb_imageEPSS 1.0%CVE-2020-27794—A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memEPSS 0.9%CVE-2023-24903HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-23012—On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosedEPSS 0.9%