CWE-590: Free of Memory not on the Heap
The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().
A kind of CWE-762 Mismatched Memory Management Routines.
From the CWE List. © The MITRE Corporation.
Newest
- qt for mcus Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs 6.5 Medium
- cisco nx-os software Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability 9.8 Critical
- imagemagick ImageMagick: Invalid Memory Free in MVG decoder 5.9 Medium
- google chrome Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote... 9.6 Critical
- pcre pcre2 In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as... 7.4 High
- mz automation libiec61850 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path 5.3 Medium
- mz automation libiec61850 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap 6.9 Medium
- avast antivirus, business antivirus, gen digital avast antivirus +4 more +6 more Avast antivirus use of stack memory after free when scanning a malformed PE file 5.5 Medium
- canonical ubuntu linux Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling 6.1 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +5 more +7 more Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
- microsoft excel, office, 365 apps +8 more +10 more Microsoft Excel Remote Code Execution Vulnerability 7.8 High
- sap se mdm server Multiple vulnerabilities in SAP MDM Server 5.6 Medium
- sap se mdm server Multiple vulnerabilities in SAP MDM Server 7.5 High
- sap se mdm server Multiple vulnerabilities in SAP MDM Server 7.5 High
- gnu pspp GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap 4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 more Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critical
- eprosima fast-dds, fast dds +1 more Malformed DATA submessage leads to bad-free error in Fast-DDS 8.6 High
- tortall yasm yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at ... 5.5 Medium
- ichitaro, justsystems ichitaro 2022 +1 more An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1... 7.0 High
- gss-ntlmssp project gss-ntlmssp GSS-NTLMSSP vulnerable to incorrect free when decoding target information 7.5 High
- php Heap buffer overflow in finfo_buffer 7.7 High
- php, debian linux +1 more Freeing unallocated memory in php_pgsql_free_params() 8.1 High
- canonical accountsservice, ubuntu linux +1 more Free of static data in accountsservice 7.8 High
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and... 9.8 Critical
- bytecodealliance wasmtime, fedoraproject fedora +1 more Wrong type for `Linker`-define functions when used across two `Engine`s 6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 more Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime 6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 more Use after free passing `externref`s to Wasm in Wasmtime 6.3 Medium
- valvesoftware game networking sockets Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments... 9.8 Critical