CWE-763: Release of Invalid Pointer or Reference
The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Semiconductor Mobile Processor, Automotive Processor, and...5.9 Medium
- linux, linux kernel +1 morebluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX7.6 High
- linux, linux kernel +1 morescsi: mpt3sas: Page fault in reply q processing5.5 Medium
- linux, linux kernel +1 morewifi: ath12k: fix kernel crash during resume7.8 High
- mozilla firefox, thunderbird +1 moreLeaving pointerlock by pressing the escape key could be prevented8.8 High
- linux, linux kernel +1 morekunit/fortify: Fix mismatched kvalloc()/vfree() usage5.5 Medium
- linux, linux kernel +1 moremm/slab: make __free(kfree) accept error pointers7.8 High
- linux, linux kernel +1 morecpufreq: schedutil: Use kobject release() method to free sugov_tunables5.5 Medium
- linux, linux kernel +1 moremm/slub: actually fix freelist pointer vs redzoning5.5 Medium
- linux, linux kernel +1 morebcachefs: kvfree bch_fs::snapshots in bch2_fs_snapshots_exit5.5 Medium
- insyde insydeh2oA memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09,...7.4 High
- wireshark, fedoraproject fedora +1 moreMismatched Memory Management Routines in Wireshark7.8 High
- linux, linux kernel +1 moretee: optee: Fix incorrect page free bug7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +11 more +13 moreUntrusted Pointer Dereference in Display8.4 High
- scontain sconeA lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for...5.5 Medium
- motorola mtm5000 series firmware, mobile radio, mtm5400 firmware +1 more +3 moreMultiple missing pointer validation checks in trusted execution module in Motorola MTM50008.2 High
- open5gsMultiple vulnerabilities in Open5GS7.5 High
- tencent qq, tim +1 moreIn Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine...7.8 High
- linux kernelAn issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping...5.5 Medium
- linux kernelCopy_from_user Spectre-V1 Gadget in Linux Kernel6.5 Medium
- linux kernelIn the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not...7.8 High
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to incorrect free when decoding target information7.5 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the...7.8 High
- qualcomm ar8035 firmware, csrb31024 firmware, qca6390 firmware +65 more +67 moreUse-after-Free in MODEM6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can...8.8 High
- f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-416917.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, msm8996au firmware +76 more +78 moreInformation disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto,...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 moreMemory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon...8.4 High
- libtiff, debian linux +1 moreIt was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose()...6.5 Medium
- upxAn invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX...5.5 Medium
- upxAn invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in...5.5 Medium
- libdwarf project libdwarflibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer...6.5 Medium
- exim, fedoraproject fedora +1 moreExim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is...7.5 High
- php, debian linux +1 moreFreeing unallocated memory in php_pgsql_free_params()8.1 High
- mediawiki, debian linux +1 moreA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.7.8 High
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is a release of invalid pointer vulnerability in some Huawei products, successful exploit...6.5 Medium
- gnu patchAn Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which...5.5 Medium
- canonical accountsservice, ubuntu linux +1 moreFree of static data in accountsservice7.8 High
- amd radeon softwareAn insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow...7.8 High
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn attacker-controlled pointer free in Busybox's hush applet leads to denial of service and...9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreloop_rw_iter in fs/io_uring.c in the Linux kernel through 5.14.6 allows local users to gain...7.8 High
- tianocore edk iiBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...7.8 High
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2....8.5 High
- keystone-engine keystoneKeystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::...7.8 High
- amd radeon software, radeon pro software +1 moreAn invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.7.8 High
- schneider-electric interactive graphical scada systemA CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def...7.8 High
- aomedia, fedoraproject fedora +1 moreaom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.9.8 Critical
- facebook thriftAn invalid free in Thrift's table-based serialization can cause the application to crash or...9.8 Critical
- nanopbInvalid free() call in Nanopb7.1 High
- Show moreLoading…