CWE-667: Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to...5.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +8 more +10 moreA locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9...4.4 Medium
- debian linux, linux kernel, broadcom fabric operating system +9 more +11 moreA locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 moreu'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in...7.8 High
- apple ios, ipados, iphone os +2 moreA lock screen issue allowed access to messages on a locked device. This issue was addressed with...2.4 Low
- apple ios, ipados, watchos +1 more +3 moreThis issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0,...6.8 Medium
- google android, debian linux +1 moreIn binder_release_work of binder.c, there is a possible use-after-free due to improper locking....7.8 High
- google androidIn setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a...7.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 High
- google androidIn SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to...7.8 High
- google androidIn the Media extractor, there is a possible use after free due to improper locking. This could...8.8 High
- google androidIn blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper...7.8 High
- mozilla firefox, firefox for android, firefox mobile +2 moreA lock was missing when accessing a data structure and importing certificate information into the...4.3 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement update8.6 High
- google androidIn clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper...7.8 High
- google androidIn reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This...7.8 High
- gog galaxyAn issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, qcs405 firmware +7 more +9 moreDouble free issue in NPU due to lack of resource locking mechanism to avoid race condition in...7.8 High
- giteaDenial of Service in Gitea7.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...5.5 Medium
- linux kernel, redhat enterprise mrg +1 moreThe fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local...7.0 High
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreRace condition between the camera functions due to lack of resource lock which will lead to...8.1 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreInsufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79...3.3 Low
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...6.8 Medium
- google androidIn libstagefright, there is a possible use-after-free due to improper locking. This could lead to...5.5 Medium
- google androidIn the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due...6.7 Medium
- google androidIn the Android kernel in the mnh driver there is a use after free due to improper locking. This...6.7 Medium
- google androidIn the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after...6.7 Medium
- google androidIn SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9...7.8 High
- openwrt libuci, motorola c1 mwr03 firmware, cx2l mwr04l firmware +2 moreAn issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface)...7.5 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may...5.5 Medium
- google androidIn multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to...5.5 Medium
- apache tomcatImproper Locking in Apache Tomcat7.5 High
- google androidIn binder_thread_read of binder.c, there is a possible use-after-free due to improper locking....7.8 High
- hp z4 g4 core-x workstation firmware, z4 g4 workstation firmware, z6 g4 workstation firmware +1 more +3 moreHP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...6.8 Medium
- hp z4 g4 core-x workstation firmware, z4 g4 workstation firmware, z6 g4 workstation firmware +1 more +3 moreHP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...7.2 High
- cisco nx-os software, nx-os, nx os +2 moreCisco NX-OS Software Remote Package Manager Command Injection Vulnerability6.4 Medium
- cisco 15454-m-wse-k9 firmware, analog voice network interface modules firmware, asa 5500 firmware +25 more +27 moreCisco Secure Boot Hardware Tampering Vulnerability6.7 Medium
- google androidIn tearDownClientInterface of WificondControl.java, there is a possible use after free due to...7.8 High
- linux kernelThe coredump implementation in the Linux kernel before 5.0.10 does not use locking or other...7.0 High
- linux kernel, debian linux, netapp active iq unified manager for vmware vsphere +7 more +9 moreA race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...5.6 Medium
- lenovo bios, 330-14igm firmware, 330-15igm firmware +175 more +177 moreIn Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this...3.3 Low
- shopxoAn issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file,...9.8 Critical
- cisco aironet access pointsCisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance ...8.6 High
- memcached, canonical ubuntu linux, debian linux +1 more +3 morememcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free...7.5 High
- freebsdThe pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a...7.8 High
- Show moreLoading…