CWE-416 · Use After Free (page 67)
Page 67 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10082 | Critical | 9.1 | 2019-09-26 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection… |
CVE-2019-16882 | High | 7.5 | 2019-09-25 | An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers… |
CVE-2019-16881 | Critical | 9.8 | 2019-09-25 | An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack o… |
CVE-2019-10996 | High | 7.8 | 2019-09-23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user ope… |
CVE-2019-16510 | High | 7.5 | 2019-09-19 | libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose. |
CVE-2019-11778 | Medium | 5.4 | 2019-09-18 | If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a sessio… |
CVE-2019-5067 | Critical | 9.8 | 2019-09-18 | An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can caus… |
CVE-2019-5066 | Critical | 9.8 | 2019-09-18 | An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can caus… |
CVE-2019-5042 | High | 8.8 | 2019-09-18 | An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can… |
CVE-2019-16396 | High | 7.8 | 2019-09-17 | GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code. |
CVE-2019-8070 | Critical | 9.8 | 2019-09-12 | Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to… |
CVE-2019-1208 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2019-16165 | Medium | 6.5 | 2019-09-09 | GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. |
CVE-2019-16140 | Critical | 9.8 | 2019-09-09 | An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion. |
CVE-2019-16138 | Critical | 9.8 | 2019-09-09 | An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, l… |
CVE-2019-9458 | High | 7.0 | 2019-09-06 | In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2019-9447 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of… |
CVE-2019-9442 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2019-9276 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local e… |
CVE-2019-9275 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution pri… |
CVE-2019-9273 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalati… |
CVE-2019-9271 | Medium | 6.4 | 2019-09-06 | In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalati… |
CVE-2019-15890 | High | 7.5 | 2019-09-06 | libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. |
CVE-2019-2174 | High | 7.8 | 2019-09-05 | In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking… |
CVE-2018-21008 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/… |
CVE-2019-15920 | Medium | 4.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; s… |
CVE-2019-15919 | Low | 3.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. |
CVE-2019-15917 | High | 7.0 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers… |
CVE-2019-14778 | High | 7.8 | 2019-08-29 | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
CVE-2019-14777 | High | 7.8 | 2019-08-29 | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
CVE-2019-14533 | High | 7.8 | 2019-08-29 | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
CVE-2019-15717 | Critical | 9.8 | 2019-08-29 | Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP. |
CVE-2017-14201 | High | 7.8 | 2019-08-29 | Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This… |
CVE-2019-14694 | Medium | 4.7 | 2019-08-28 | A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handli… |
CVE-2018-20997 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing. |
CVE-2019-15552 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution. |
CVE-2019-7363 | High | 7.8 | 2019-08-23 | Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that… |
CVE-2019-15292 | Medium | 4.7 | 2019-08-21 | An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/dd… |
CVE-2019-8061 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8059 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8058 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8057 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8056 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8055 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8054 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8053 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8051 | Medium | 4.3 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8047 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8039 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8038 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8036 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8034 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8033 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8031 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8030 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8029 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8028 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8026 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8025 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8024 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8013 | High | 8.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8003 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-2127 | High | 7.8 | 2019-08-20 | In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to local esc… |
CVE-2019-15239 | High | 7.8 | 2019-08-20 | In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm k… |
CVE-2019-15232 | Critical | 9.8 | 2019-08-20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession… |
CVE-2019-15220 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p… |
CVE-2019-15215 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c… |
CVE-2019-15214 | Medium | 6.4 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data stru… |
CVE-2019-15213 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-i… |
CVE-2019-15211 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c… |
CVE-2018-20976 | High | 7.8 | 2019-08-19 | An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure. |
CVE-2016-10906 | High | 7.0 | 2019-08-19 | An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the func… |
CVE-2016-10905 | High | 7.8 | 2019-08-19 | An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry. |
CVE-2019-15140 | High | 8.8 | 2019-08-18 | coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecifi… |
CVE-2019-13514 | High | 7.8 | 2019-08-15 | In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, w… |
CVE-2019-13511 | Low | 3.3 | 2019-08-15 | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by… |
CVE-2019-13510 | High | 7.8 | 2019-08-15 | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an uns… |
CVE-2019-14980 | Medium | 6.5 | 2019-08-12 | In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause… |
CVE-2019-14294 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read. |
CVE-2018-20856 | High | 7.8 | 2019-07-26 | An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is… |
CVE-2019-5606 | High | 7.8 | 2019-07-26 | In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE b… |
CVE-2019-1010127 | High | 7.8 | 2019-07-25 | VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or info… |
CVE-2019-2316 | High | 8.8 | 2019-07-25 | When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice &… |
CVE-2019-2314 | High | 7.0 | 2019-07-25 | Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer I… |
CVE-2019-2298 | High | 7.8 | 2019-07-25 | Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I… |
CVE-2019-2293 | High | 7.8 | 2019-07-25 | Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra… |
CVE-2019-2290 | High | 7.8 | 2019-07-25 | Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Sna… |
CVE-2019-2263 | High | 7.8 | 2019-07-25 | Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer I… |
CVE-2019-1010177 | Critical | 9.8 | 2019-07-24 | Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegEx… |
CVE-2019-9821 | High | 8.1 | 2019-07-23 | A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. Th… |
CVE-2019-9820 | Critical | 9.8 | 2019-07-23 | A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This… |
CVE-2019-9818 | High | 8.3 | 2019-07-23 | A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main pr… |
CVE-2019-11713 | Critical | 9.8 | 2019-07-23 | A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This… |
CVE-2019-11692 | Critical | 9.8 | 2019-07-23 | A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable… |
CVE-2019-11691 | Critical | 9.8 | 2019-07-23 | A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been fr… |
CVE-2019-1010170 | High | 7.5 | 2019-07-23 | Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector… |
CVE-2019-2264 | High | 7.8 | 2019-07-22 | Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voic… |
CVE-2019-2260 | High | 7.0 | 2019-07-22 | A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2019-6822 | High | 7.8 | 2019-07-15 | A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zeli… |
CVE-2019-13224 | Critical | 9.8 | 2019-07-10 | A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possib… |