Common Weakness Enumeration

    CWE Definition / CWE-590

    CWE-590: Free of Memory not on the Heap

    The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().

    Published:15 Dec 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-762: Mismatched Memory Management Routines

    CWE-123: Write-what-where Condition