CWE-416 · Use After Free (page 56)
Page 56 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0156 | Medium | 5.5 | 2022-01-10 | vim is vulnerable to Use After Free |
CVE-2021-46142 | Medium | 5.5 | 2022-01-06 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. |
CVE-2021-46141 | Medium | 5.5 | 2022-01-06 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner. |
CVE-2021-41043 | Medium | 5.5 | 2022-01-05 | Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. |
CVE-2021-30337 | High | 8.4 | 2022-01-03 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-30262 | High | 8.4 | 2022-01-03 | Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-45944 | Medium | 5.5 | 2022-01-01 | Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). |
CVE-2021-4192 | High | 7.8 | 2021-12-31 | vim is vulnerable to Use After Free |
CVE-2021-4187 | High | 7.8 | 2021-12-29 | vim is vulnerable to Use After Free |
CVE-2021-4173 | High | 7.8 | 2021-12-27 | vim is vulnerable to Use After Free |
CVE-2021-45702 | High | 7.5 | 2021-12-27 | An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free. |
CVE-2021-45701 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free. |
CVE-2018-25028 | High | 7.5 | 2021-12-27 | An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_context can cause a use-after-free. |
CVE-2018-25027 | High | 7.5 | 2021-12-27 | An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free. |
CVE-2021-45720 | High | 7.5 | 2021-12-26 | An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation. |
CVE-2021-45719 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free. |
CVE-2021-45718 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has a use-after-free. |
CVE-2021-45717 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a use-after-free. |
CVE-2021-45716 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free. |
CVE-2021-45715 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free. |
CVE-2021-45714 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a use-after-free. |
CVE-2021-45713 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a use-after-free. |
CVE-2021-45483 | Medium | 6.5 | 2021-12-25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889. |
CVE-2021-45482 | Medium | 6.5 | 2021-12-25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889. |
CVE-2020-3886 | High | 7.8 | 2021-12-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security… |
CVE-2021-4067 | High | 8.8 | 2021-12-23 | Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4065 | High | 8.8 | 2021-12-23 | Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4064 | High | 8.8 | 2021-12-23 | Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4063 | High | 8.8 | 2021-12-23 | Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-4057 | High | 8.8 | 2021-12-23 | Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea… |
CVE-2021-4053 | High | 8.8 | 2021-12-23 | Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4052 | High | 8.8 | 2021-12-23 | Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
CVE-2021-38011 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38008 | High | 8.8 | 2021-12-23 | Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38006 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38005 | High | 8.8 | 2021-12-23 | Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-45263 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash. |
CVE-2021-45262 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash. |
CVE-2021-45291 | Medium | 5.5 | 2021-12-21 | The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4… |
CVE-2021-0899 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0898 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0893 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-39656 | Medium | 6.7 | 2021-12-15 | In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel w… |
CVE-2021-39638 | Medium | 6.7 | 2021-12-15 | In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privile… |
CVE-2021-1048 | High | 7.8 | 2021-12-15 | In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with… |
CVE-2021-1042 | Medium | 4.4 | 2021-12-15 | In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local i… |
CVE-2021-1029 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-1028 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-0929 | High | 7.8 | 2021-12-15 | In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escal… |
CVE-2021-0920 | Medium | 6.4 | 2021-12-15 | In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System e… |
CVE-2021-44447 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products contains a u… |
CVE-2021-44433 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains a u… |
CVE-2021-44014 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt10… |
CVE-2021-43539 | High | 8.8 | 2021-12-08 | Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers… |
CVE-2021-43535 | High | 8.8 | 2021-12-08 | A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable… |
CVE-2021-38504 | High | 8.8 | 2021-12-08 | When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption a… |
CVE-2021-37045 | Critical | 9.8 | 2021-12-08 | There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mo… |
CVE-2021-4069 | High | 7.8 | 2021-12-06 | vim is vulnerable to Use After Free |
CVE-2021-44047 | High | 7.8 | 2021-12-05 | A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsi… |
CVE-2021-43790 | High | 8.5 | 2021-11-30 | Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all versions published to crates.io that all… |
CVE-2021-38002 | Critical | 9.6 | 2021-11-23 | Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
CVE-2021-37998 | High | 8.8 | 2021-11-23 | Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-37997 | High | 8.8 | 2021-11-23 | Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap… |
CVE-2021-43582 | High | 7.8 | 2021-11-22 | A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within t… |
CVE-2021-21900 | High | 8.8 | 2021-11-19 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can… |
CVE-2021-3962 | High | 7.8 | 2021-11-19 | A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to c… |
CVE-2021-3974 | High | 7.8 | 2021-11-19 | vim is vulnerable to Use After Free |
CVE-2021-37322 | High | 7.8 | 2021-11-18 | GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c. |
CVE-2021-42269 | High | 7.8 | 2021-11-18 | Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitr… |
CVE-2021-0670 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0669 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0667 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0664 | Medium | 6.7 | 2021-11-18 | In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0656 | Medium | 6.7 | 2021-11-18 | In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0629 | Medium | 6.7 | 2021-11-18 | In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-33480 | Medium | 5.5 | 2021-11-17 | An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c. |
CVE-2021-42721 | High | 7.8 | 2021-11-16 | Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitr… |
CVE-2021-42386 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function |
CVE-2021-42385 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
CVE-2021-42384 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special fun… |
CVE-2021-42383 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
CVE-2021-42382 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function |
CVE-2021-42381 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function |
CVE-2021-42380 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function |
CVE-2021-42379 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file fu… |
CVE-2021-42378 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function |
CVE-2020-12901 | Medium | 5.5 | 2021-11-15 | Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure. |
CVE-2021-42706 | High | 7.8 | 2021-11-15 | This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer |
CVE-2021-43275 | High | 7.8 | 2021-11-14 | A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of… |
CVE-2021-43274 | High | 7.8 | 2021-11-14 | A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The is… |
CVE-2021-30266 | Medium | 6.7 | 2021-11-12 | Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2021-30264 | Medium | 6.7 | 2021-11-12 | Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Con… |
CVE-2021-30263 | Medium | 6.7 | 2021-11-12 | Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdrago… |
CVE-2021-42074 | High | 7.5 | 2021-11-08 | An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side impl… |
CVE-2021-43412 | High | 7.8 | 2021-11-07 | An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client on any port, which can lead to port use-… |
CVE-2021-41220 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the async implementation of `CollectiveReduceV2` suffers from a memory leak an… |
CVE-2021-43400 | Critical | 9.1 | 2021-11-04 | An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call. |
CVE-2021-38498 | High | 7.5 | 2021-11-03 | During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitabl… |
CVE-2021-38496 | High | 8.8 | 2021-11-03 | During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable cras… |
CVE-2020-27820 | Medium | 4.7 | 2021-11-03 | A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remo… |