CWE-416 · Use After Free (page 73)
Page 73 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10524 | High | 7.8 | 2019-11-06 | Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Sn… |
CVE-2019-10515 | Medium | 5.5 | 2019-11-06 | DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT… |
CVE-2019-18178 | High | 7.5 | 2019-11-04 | Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFRE… |
CVE-2019-18683 | High | 7.0 | 2019-11-04 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributio… |
CVE-2019-17143 | Medium | 4.3 | 2019-10-25 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is req… |
CVE-2019-17142 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-17141 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-17140 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-18408 | High | 7.5 | 2019-10-24 | archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, r… |
CVE-2019-18197 | High | 7.5 | 2019-10-18 | In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed… |
CVE-2019-8225 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8224 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8223 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8221 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8220 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006… |
CVE-2019-8219 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8217 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8215 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8214 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8213 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8212 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8211 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8210 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8209 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8208 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8203 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8192 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8188 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8187 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8181 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8180 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8179 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8178 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8177 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8176 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8175 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-17547 | High | 8.8 | 2019-10-14 | In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. |
CVE-2019-17541 | High | 8.8 | 2019-10-14 | ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. |
CVE-2019-17534 | High | 8.8 | 2019-10-13 | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-afte… |
CVE-2019-2215 | High | 7.8 | 2019-10-11 | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerab… |
CVE-2019-5527 | High | 8.8 | 2019-10-10 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of thi… |
CVE-2019-5053 | High | 7.8 | 2019-10-09 | An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in… |
CVE-2019-5047 | High | 7.8 | 2019-10-09 | An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resu… |
CVE-2019-6776 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-6775 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-6774 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exp… |
CVE-2019-13320 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13319 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13317 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-13316 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-13315 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to expl… |
CVE-2019-13332 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exp… |
CVE-2019-13328 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13327 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13326 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-17069 | High | 7.5 | 2019-10-01 | PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message. |
CVE-2019-2284 | High | 7.0 | 2019-09-30 | Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indust… |
CVE-2019-10509 | Critical | 9.8 | 2019-09-30 | Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2019-10501 | High | 7.8 | 2019-09-30 | Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… |
CVE-2019-10497 | High | 7.8 | 2019-09-30 | Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Aut… |
CVE-2019-9431 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to… |
CVE-2019-9427 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution… |
CVE-2019-9381 | High | 7.5 | 2019-09-27 | In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileg… |
CVE-2019-9350 | High | 7.8 | 2019-09-27 | In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2019-9347 | Medium | 5.5 | 2019-09-27 | In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execu… |
CVE-2019-9268 | Medium | 5.5 | 2019-09-27 | In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no add… |
CVE-2019-9259 | Medium | 6.7 | 2019-09-27 | In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution… |
CVE-2019-11752 | High | 8.8 | 2019-09-27 | It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
CVE-2019-11746 | High | 8.8 | 2019-09-27 | A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
CVE-2019-10082 | Critical | 9.1 | 2019-09-26 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection… |
CVE-2019-16882 | High | 7.5 | 2019-09-25 | An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers… |
CVE-2019-16881 | Critical | 9.8 | 2019-09-25 | An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack o… |
CVE-2019-10996 | High | 7.8 | 2019-09-23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user ope… |
CVE-2019-16510 | High | 7.5 | 2019-09-19 | libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose. |
CVE-2019-11778 | Medium | 5.4 | 2019-09-18 | If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a sessio… |
CVE-2019-5067 | Critical | 9.8 | 2019-09-18 | An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can caus… |
CVE-2019-5066 | Critical | 9.8 | 2019-09-18 | An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can caus… |
CVE-2019-5042 | High | 8.8 | 2019-09-18 | An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can… |
CVE-2019-16396 | High | 7.8 | 2019-09-17 | GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code. |
CVE-2019-8070 | Critical | 9.8 | 2019-09-12 | Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to… |
CVE-2019-1208 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2019-16165 | Medium | 6.5 | 2019-09-09 | GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. |
CVE-2019-16140 | Critical | 9.8 | 2019-09-09 | An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion. |
CVE-2019-16138 | Critical | 9.8 | 2019-09-09 | An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, l… |
CVE-2019-9458 | High | 7.0 | 2019-09-06 | In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2019-9447 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of… |
CVE-2019-9442 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2019-9276 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local e… |
CVE-2019-9275 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution pri… |
CVE-2019-9273 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalati… |
CVE-2019-9271 | Medium | 6.4 | 2019-09-06 | In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalati… |
CVE-2019-15890 | High | 7.5 | 2019-09-06 | libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. |
CVE-2019-2174 | High | 7.8 | 2019-09-05 | In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking… |
CVE-2018-21008 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/… |
CVE-2019-15920 | Medium | 4.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; s… |
CVE-2019-15919 | Low | 3.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. |
CVE-2019-15917 | High | 7.0 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers… |
CVE-2019-14778 | High | 7.8 | 2019-08-29 | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
CVE-2019-14777 | High | 7.8 | 2019-08-29 | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
CVE-2019-14533 | High | 7.8 | 2019-08-29 | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |