CWE-416 · Use After Free (page 65)
Page 65 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6378 | High | 8.8 | 2020-02-11 | Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-14088 | High | 7.8 | 2020-02-07 | Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdrago… |
CVE-2019-14055 | High | 7.8 | 2020-02-07 | Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon Auto, Snapd… |
CVE-2019-14040 | High | 7.8 | 2020-02-07 | Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdr… |
CVE-2020-8649 | Medium | 5.9 | 2020-02-06 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. |
CVE-2020-8648 | High | 7.1 | 2020-02-06 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. |
CVE-2020-8647 | Medium | 6.1 | 2020-02-06 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. |
CVE-2020-8447 | Critical | 9.8 | 2020-01-30 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of sys… |
CVE-2020-8444 | Critical | 9.8 | 2020-01-30 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of oss… |
CVE-2020-8428 | High | 7.1 | 2020-01-29 | fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly o… |
CVE-2019-8257 | Critical | 9.8 | 2020-01-28 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2016-4761 | High | 8.8 | 2020-01-22 | WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS |
CVE-2019-19344 | Medium | 6.5 | 2020-01-21 | There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5… |
CVE-2019-14034 | High | 7.8 | 2020-01-21 | Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2019-14024 | High | 7.8 | 2020-01-21 | Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Ni… |
CVE-2019-10602 | High | 7.8 | 2020-01-21 | Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd… |
CVE-2019-10585 | High | 7.8 | 2020-01-21 | Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon… |
CVE-2019-10583 | High | 7.8 | 2020-01-21 | Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdra… |
CVE-2019-10582 | High | 7.8 | 2020-01-21 | Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2019-10581 | Critical | 9.8 | 2020-01-21 | NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto… |
CVE-2019-10548 | High | 7.8 | 2020-01-21 | While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Sna… |
CVE-2019-5145 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trig… |
CVE-2019-5131 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF… |
CVE-2019-5130 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF d… |
CVE-2019-5126 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trig… |
CVE-2020-1602 | High | 7.1 | 2020-01-15 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay… |
CVE-2020-0642 | High | 7.8 | 2020-01-14 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2020-0634 | High | 7.8 | 2020-01-14 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common… |
CVE-2020-7053 | High | 7.8 | 2020-01-14 | In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_… |
CVE-2020-6840 | Critical | 9.8 | 2020-01-11 | In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c. |
CVE-2020-6838 | Critical | 9.8 | 2020-01-11 | In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c. |
CVE-2020-6377 | High | 8.8 | 2020-01-10 | Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13767 | High | 8.8 | 2020-01-10 | Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2019-17013 | High | 8.8 | 2020-01-08 | Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2019-17008 | High | 8.8 | 2020-01-08 | When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects… |
CVE-2019-11757 | High | 8.8 | 2020-01-08 | When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use… |
CVE-2019-11756 | High | 8.8 | 2020-01-08 | Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects F… |
CVE-2020-0002 | High | 8.8 | 2020-01-08 | In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no addit… |
CVE-2019-13766 | Medium | 6.5 | 2020-01-03 | Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13765 | Medium | 6.5 | 2020-01-03 | Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2020-5395 | High | 8.8 | 2020-01-03 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. |
CVE-2019-20169 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. |
CVE-2019-20168 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_f… |
CVE-2019-20090 | High | 7.8 | 2019-12-30 | An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp. |
CVE-2019-20079 | High | 7.8 | 2019-12-30 | The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. |
CVE-2019-20010 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. |
CVE-2019-20006 | High | 7.5 | 2019-12-26 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. Thi… |
CVE-2019-19966 | Medium | 4.6 | 2019-12-25 | In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-d… |
CVE-2019-19952 | Critical | 9.8 | 2019-12-24 | In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage. |
CVE-2019-19950 | Critical | 9.8 | 2019-12-24 | In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. |
CVE-2019-16464 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16459 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16452 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16448 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16445 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2018-1311 | High | 8.1 | 2019-12-18 | The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed… |
CVE-2019-8686 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2… |
CVE-2019-8681 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2… |
CVE-2019-8662 | Critical | 9.8 | 2019-12-18 | This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigge… |
CVE-2019-8661 | Critical | 9.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbit… |
CVE-2019-8647 | Critical | 9.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to… |
CVE-2019-8644 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2… |
CVE-2019-8613 | Critical | 9.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able… |
CVE-2019-8610 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1… |
CVE-2019-8608 | Medium | 6.3 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1… |
CVE-2019-8605 | High | 7.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malici… |
CVE-2019-8584 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1… |
CVE-2019-8556 | High | 8.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iClou… |
CVE-2019-8526 | High | 7.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated… |
CVE-2019-7285 | High | 8.8 | 2019-12-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iClou… |
CVE-2019-10518 | High | 7.8 | 2019-12-18 | Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2019-3994 | High | 7.5 | 2019-12-17 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG ser… |
CVE-2019-19813 | Medium | 5.5 | 2019-12-17 | In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after… |
CVE-2019-19807 | High | 7.8 | 2019-12-15 | In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_t… |
CVE-2019-19770 | High | 8.2 | 2019-12-12 | In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory… |
CVE-2019-19769 | Medium | 6.7 | 2019-12-12 | In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h). |
CVE-2019-19768 | High | 7.5 | 2019-12-12 | In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_… |
CVE-2019-19767 | Medium | 5.5 | 2019-12-12 | The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entr… |
CVE-2019-10494 | High | 8.1 | 2019-12-12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Cons… |
CVE-2019-10484 | Medium | 5.5 | 2019-12-12 | Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon… |
CVE-2019-13732 | High | 8.8 | 2019-12-10 | Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13729 | High | 8.8 | 2019-12-10 | Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13725 | High | 8.8 | 2019-12-10 | Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2019-19448 | High | 7.8 | 2019-12-08 | In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to… |
CVE-2019-19447 | High | 7.8 | 2019-12-08 | In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super… |
CVE-2019-2230 | High | 7.5 | 2019-12-06 | In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote inf… |
CVE-2019-2217 | High | 7.8 | 2019-12-06 | In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no add… |
CVE-2019-19590 | High | 7.8 | 2019-12-05 | In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow w… |
CVE-2019-11940 | Critical | 9.8 | 2019-12-04 | In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corr… |
CVE-2019-5096 | Critical | 9.8 | 2019-12-03 | An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in version… |
CVE-2019-19543 | High | 7.8 | 2019-12-03 | In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. |
CVE-2019-19531 | Medium | 6.8 | 2019-12-03 | In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc… |
CVE-2019-19530 | Medium | 4.6 | 2019-12-03 | In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CI… |
CVE-2019-19529 | Medium | 6.3 | 2019-12-03 | In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka… |
CVE-2019-19528 | Medium | 6.1 | 2019-12-03 | In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CI… |
CVE-2019-19527 | Medium | 6.8 | 2019-12-03 | In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CI… |
CVE-2019-19526 | Medium | 4.6 | 2019-12-03 | In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af… |
CVE-2019-19525 | Medium | 4.6 | 2019-12-03 | In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka… |
CVE-2019-19524 | Medium | 4.6 | 2019-12-03 | In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID… |
CVE-2019-19523 | Medium | 4.6 | 2019-12-03 | In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-4… |