CVE-2026-84131 | High | 8.8 | 2026-09-01 | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Fir… |
CVE-2023-20511 | Medium | 6.4 | 2026-08-31 | Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to ar… |
CVE-2026-19315 | | | 2026-08-28 | A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending spec… |
CVE-2026-74947 | High | 8.8 | 2026-08-18 | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thu… |
CVE-2026-15718 | Medium | 4.3 | 2026-07-14 | We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefo… |
CVE-2026-57248 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result… |
CVE-2026-53000 | High | 7.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nat: use kfree_rcu to release ops
Florian Westphal says:
"Historically this i… |
CVE-2026-52993 | Critical | 9.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
tipc: fix double-free in tipc_buf_append()
tipc_msg_validate() can potentially reallocate… |
CVE-2026-9516 | High | 7.5 | 2026-06-03 | Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.
To skip a leading 3-… |
CVE-2026-46116 | High | 7.8 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
KASAN reproduces a slab-… |
CVE-2026-47312 | Medium | 5.5 | 2026-05-19 | Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.
This issue affects Escargot: 590345cc6258317… |
CVE-2025-48431 | High | 7.5 | 2026-04-28 | Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.
This issue affects Apache Thrift: before 0.23.0.
Users are rec… |
CVE-2025-65116 | Medium | 5.5 | 2026-04-07 | Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management… |
CVE-2018-25243 | Medium | 6.2 | 2026-04-04 | FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to th… |
CVE-2026-22770 | Medium | 6.5 | 2026-01-20 | ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buff… |
CVE-2025-14233 | Critical | 9.8 | 2026-01-16 | Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment t… |
CVE-2025-48768 | Medium | 6.5 | 2026-01-01 | Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed root filesystem inod… |
CVE-2025-13824 | | | 2025-12-15 | A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becom… |
CVE-2025-11838 | High | 7.5 | 2025-12-04 | A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile… |
CVE-2025-54333 | Medium | 5.3 | 2025-11-04 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profi… |
CVE-2025-47329 | High | 7.8 | 2025-09-24 | Memory corruption while handling invalid inputs in application info setup. |
CVE-2025-25215 | High | 8.8 | 2025-06-13 | An arbitrary free vulnerability exists in the cv_close functionality of
Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36… |
CVE-2025-47749 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening spec… |
CVE-2025-30379 | High | 7.8 | 2025-05-13 | Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2022-49160 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix crash during module load unload test
During purex packet handling the… |
CVE-2024-56573 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved:
efi/libstub: Free correct pointer on failure
cmdline_ptr is an out parameter, which is no… |
CVE-2024-44852 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar… |
CVE-2024-50057 | Low | 3.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tipd: Free IRQ only if it was requested before
In polling mode, if no IRQ was… |
CVE-2024-25074 | Medium | 5.9 | 2024-09-10 | An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2… |
CVE-2024-42132 | High | 7.6 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved:
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
Syzbot hit warning… |
CVE-2022-48835 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Page fault in reply q processing
A page fault was encountered in mpt3sas o… |
CVE-2024-40979 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix kernel crash during resume
Currently during resume, QMI target memory i… |
CVE-2024-6607 | High | 8.8 | 2024-07-09 | It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<select>` element ove… |
CVE-2024-38617 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved:
kunit/fortify: Fix mismatched kvalloc()/vfree() usage
The kv*() family of tests were acci… |
CVE-2024-36890 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved:
mm/slab: make __free(kfree) accept error pointers
Currently, if an automatically freed al… |
CVE-2021-47387 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved:
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
The struct sugov_… |
CVE-2021-47221 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved:
mm/slub: actually fix freelist pointer vs redzoning
It turns out that SLUB redzoning ("sl… |
CVE-2024-35832 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved:
bcachefs: kvfree bch_fs::snapshots in bch2_fs_snapshots_exit
bch_fs::snapshots is allocat… |
CVE-2024-25079 | High | 7.4 | 2024-05-15 | A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel… |
CVE-2024-2955 | High | 7.8 | 2024-03-26 | T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file |
CVE-2021-47087 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix incorrect page free bug
Pointer to the allocated pages (struct page *page… |
CVE-2023-43532 | High | 8.4 | 2024-02-06 | Memory corruption while reading ACPI config through the user mode app. |
CVE-2022-46486 | Medium | 5.5 | 2023-12-30 | A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information. |
CVE-2022-26942 | High | 8.2 | 2023-10-19 | The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one res… |
CVE-2023-4883 | High | 7.5 | 2023-10-03 | Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending… |
CVE-2023-34312 | High | 7.8 | 2023-06-01 | In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication… |
CVE-2023-0459 | Medium | 6.5 | 2023-05-25 | Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a… |
CVE-2023-31082 | Medium | 5.5 | 2023-04-24 | An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function called from an invalid context in gsmld_write, which will… |
CVE-2020-27545 | Medium | 6.5 | 2023-04-16 | libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object. |
CVE-2022-48425 | High | 7.8 | 2023-03-19 | In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. |
CVE-2023-25565 | High | 7.5 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target inf… |
CVE-2022-4696 | High | 7.8 | 2023-01-11 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_W… |
CVE-2022-25725 | Medium | 6.2 | 2023-01-09 | Denial of service in MODEM due to improper pointer handling |
CVE-2022-42309 | High | 8.8 | 2022-11-01 | Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an… |
CVE-2022-41691 | High | 7.5 | 2022-10-19 | When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. |
CVE-2022-28203 | High | 7.5 | 2022-09-19 | A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special… |
CVE-2022-2521 | Medium | 6.5 | 2022-08-31 | It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a p… |
CVE-2020-27798 | Medium | 5.5 | 2022-08-25 | An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27797 | Medium | 5.5 | 2022-08-25 | An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2022-37451 | High | 7.5 | 2022-08-06 | Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc. |
CVE-2022-31625 | High | 8.1 | 2022-06-16 | In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the para… |
CVE-2022-24958 | High | 7.8 | 2022-02-11 | drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. |
CVE-2021-40042 | Medium | 6.5 | 2022-01-31 | There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product ve… |
CVE-2021-45261 | Medium | 5.5 | 2021-12-22 | An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service. |
CVE-2021-3939 | High | 7.8 | 2021-11-17 | Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static… |
CVE-2021-42377 | Critical | 9.8 | 2021-11-15 | An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, du… |
CVE-2020-12963 | High | 7.8 | 2021-11-15 | An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system. |
CVE-2021-41073 | High | 7.8 | 2021-09-19 | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a fre… |
CVE-2021-28216 | High | 7.8 | 2021-08-05 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. |
CVE-2021-3682 | High | 8.5 | 2021-08-05 | A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a S… |
CVE-2020-36404 | High | 7.8 | 2021-07-01 | Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl. |
CVE-2020-12982 | High | 7.8 | 2021-06-11 | An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service. |
CVE-2021-22760 | High | 7.8 | 2021-06-11 | A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data o… |
CVE-2021-30473 | Critical | 9.8 | 2021-05-06 | aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. |
CVE-2021-24028 | Critical | 9.8 | 2021-04-14 | An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects… |
CVE-2021-21401 | High | 7.1 | 2021-03-23 | Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can… |
CVE-2020-36224 | High | 7.5 | 2021-01-26 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of servic… |
CVE-2020-0444 | High | 7.8 | 2020-12-14 | In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of pri… |
CVE-2020-28941 | Medium | 5.5 | 2020-11-19 | An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver coul… |
CVE-2020-5139 | High | 7.5 | 2020-10-12 | A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and l… |
CVE-2020-24371 | Medium | 5.3 | 2020-08-17 | lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage. |
CVE-2020-8715 | Medium | 5.5 | 2020-08-13 | Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable… |
CVE-2019-18619 | High | 7.8 | 2020-07-22 | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to… |
CVE-2020-13132 | Medium | 4.6 | 2020-07-09 | An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c th… |
CVE-2020-5972 | High | 7.1 | 2020-06-30 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may… |
CVE-2020-0103 | Critical | 9.8 | 2020-05-14 | In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no… |
CVE-2020-9098 | High | 7.5 | 2020-04-30 | Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when… |
CVE-2020-11105 | Critical | 9.8 | 2020-03-30 | An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. T… |
CVE-2019-20632 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in… |
CVE-2019-20631 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list… |
CVE-2019-19820 | High | 7.8 | 2020-01-10 | An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalatio… |
CVE-2019-20202 | Medium | 6.5 | 2019-12-31 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an i… |
CVE-2019-20170 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in… |
CVE-2013-4695 | High | 7.8 | 2019-12-27 | Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution |
CVE-2019-11930 | Critical | 9.8 | 2019-12-04 | An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to… |
CVE-2019-9290 | High | 7.8 | 2019-09-27 | In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local escalation of privilege… |
CVE-2018-9557 | High | 7.8 | 2018-12-06 | In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privil… |
CVE-2018-6836 | Critical | 9.8 | 2018-02-08 | The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allow… |
CVE-2017-18075 | High | 7.8 | 2018-01-24 | crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_C… |
CVE-2017-0731 | High | 7.8 | 2017-08-09 | A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1… |