Falhas do tipo CWE-416

4.450 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar (ler ou escrever) um bloco de memória que já foi liberado (free, delete). O programa mantém um ponteiro para a memória, mas o sistema operacional pode reatribuir essa região para outro uso, causando corrupção de dados, travamento ou execução de código arbitrário.

Exemplo

Um servidor web aloca memória para armazenar dados de sessão do usuário, depois libera essa memória quando a sessão encerra. Se uma thread continuar tentando acessar essa sessão após a liberação, pode ler dados de outra sessão ou sobrescrever dados críticos de outro processo.

Como mitigar

Sempre anule ponteiros após liberar memória (ptr = NULL), use variáveis de controle para rastrear estado de alocação, implemente gerenciamento automático de memória quando possível (smart pointers em C++), e execute testes com sanitizers (AddressSanitizer, Valgrind) durante desenvolvimento e CI/CD.

CVE-2009-4324HIGHUse-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before EPSS 81.9%KEVCVE-2012-4969HIGHUse-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackerEPSS 81.7%KEVCVE-2025-21298CRITICALWindows OLE Remote Code Execution VulnerabilityEPSS 80.9%CVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 80.7%KEVCVE-2012-4792HIGHUse-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web EPSS 78.8%KEVCVE-2017-0261HIGHMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly EPSS 78.1%KEVCVE-2013-1347HIGHMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 77.9%KEVCVE-2013-3897HIGHUse-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers EPSS 77.5%KEVCVE-2021-40449HIGHWin32k Elevation of Privilege VulnerabilityEPSS 74.1%KEVCVE-2013-2551HIGHUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted webEPSS 74.1%KEVCVE-2019-1429HIGHA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripEPSS 72.6%KEVCVE-2020-13557HIGHA use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially craftEPSS 70.4%CVE-2021-39836HIGHAdobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution VulnerabilityEPSS 69.5%CVE-2019-5096CRITICALAn exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server appEPSS 67.0%CVE-2021-28639HIGHAdobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution VulnerabilityEPSS 66.1%CVE-2020-13548HIGHIn Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code EPSS 65.8%CVE-2021-39837HIGHAdobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2021-39839HIGHAdobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2021-39838HIGHAdobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2019-0211HIGHIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes orEPSS 65.0%KEV