Fallos del tipo CWE-763

39 resultados

Liberação de ponteiro ou referência inválida

Ocorre quando o código tenta liberar (desalocar) um ponteiro que não aponta para memória válida alocada — pode ser nulo, já foi liberado, aponta para variável local, ou foi corrompido. Isso causa corrupção de heap, travamento da aplicação ou comportamento indefinido que pode ser explorado para execução de código.

Ejemplo

Uma função aloca memória, atribui o ponteiro a uma variável global, e depois a mesma função libera esse ponteiro. Se a função for chamada duas vezes sem reinicializar a variável global, a segunda chamada tentará liberar um ponteiro já liberado (use-after-free).

Cómo mitigar

Sempre inicialize ponteiros para nulo após liberar, valide se um ponteiro é válido antes de desalocar, use smart pointers (C++) ou garbage collection quando possível, e implemente testes de vazamento de memória e sanitizers (AddressSanitizer, Valgrind) no pipeline de build.

CVE-2019-11930—An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVEPSS 3.2%CVE-2021-3682—A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulEPSS 2.9%CVE-2025-25215HIGHDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityEPSS 1.9%CVE-2021-21401HIGHInvalid free() call in NanopbEPSS 1.8%CVE-2020-5139—A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InEPSS 1.8%CVE-2021-24028—An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other unEPSS 1.7%CVE-2021-22760—A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulEPSS 1.2%CVE-2025-48431HIGHApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.EPSS 1.1%CVE-2022-2521—It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522EPSS 1.0%CVE-2020-27545MEDIUMlibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted EPSS 0.8%CVE-2025-48768MEDIUMApache NuttX RTOS: fs/inode: fs_inoderemove root inode removalEPSS 0.8%CVE-2025-14233CRITICALInvalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on thEPSS 0.8%CVE-2023-0459MEDIUMCopy_from_user Spectre-V1 Gadget in Linux KernelEPSS 0.6%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.6%CVE-2023-34312HIGHIn Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-proEPSS 0.6%CVE-2024-44852HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetEPSS 0.6%CVE-2024-6607HIGHLeaving pointerlock by pressing the escape key could be preventedEPSS 0.6%CVE-2023-4883HIGHMultiple vulnerabilities in Open5GSEPSS 0.5%CVE-2025-30379HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-11838HIGHWatchGuard Firebox iked Memory Corruption VulnerabilityEPSS 0.5%