CWE-763: Release of Invalid Pointer or Reference
The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd...7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through...5.5 Medium
- google androidIn audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in...7.8 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause...7.5 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 High
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 High
- lualgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a...5.3 Medium
- intel compute module hns2600bp firmware, compute module hns2600kp firmware, compute module hns2600tp firmware +15 more +17 moreInvalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before...5.5 Medium
- hp envy - 13t-ah100 firmware, envy - 13t-aq100 firmware, envy - 17t-bw000 firmware +109 more +111 moreIncorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX...7.8 High
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect...4.3 Medium
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer...7.1 High
- google androidIn a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to...9.8 Critical
- huawei oceanstor 5310 firmwareHuawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access...7.5 High
- usc cerealAn issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr...9.8 Critical
- gpacAn issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains...5.5 Medium
- gpacAn issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains...5.5 Medium
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to...6.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid...5.5 Medium
- winampWinamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution7.8 High
- kyrol internet securityAn invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet...7.8 High
- facebook hhvmAn invalid free in mb_detect_order can cause the application to crash or potentially result in...9.8 Critical
- google androidIn tzdata there is possible memory corruption due to a mismatch between allocation and...7.8 High
- google androidIn really_install_package of install.cpp, there is a possible free of arbitrary memory due to...7.8 High
- wiresharkThe netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a...9.8 Critical
- linux kernel, canonical ubuntu linux +1 morecrypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local...7.8 High
- google androidA elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product:...7.8 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...5.0 Medium
- opera browserOpera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that...9.3 High