CWE-825: Expired Pointer Dereference
The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.
Also known as Dangling pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- aws firecracker Guest access to Firecracker process memory after a failed memory discard 7.1 High
- vtk An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation... 7.5 High
- vtk An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2... 7.5 High
- openwrt odhcpd odhcpd DHCPv6 IA dangling first pointer use-after-free 8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup 6.5 Medium
- zephyrproject zephyr Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption 6.3 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more Sssd: sssd: denial of service via use-after-free in kcm ticket renewal 4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if 7.0 High
- strongswan strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the... 5.9 Medium
- michaelrsweet pdfio PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting 7.1 High
- wireshark Expired Pointer Dereference in Wireshark 3.1 Low
- wireshark Expired Pointer Dereference in Wireshark 3.1 Low
- academysoftwarefoundation openimageio OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` 5.3 Medium
- linux, linux kernel +1 more can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet 7.8 High
- zephyrproject zephyr User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`) 7.1 High
- ladybird Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration 8.9 High
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 more Sssd: use-after-free crash in sssd' 'sssd_pam' process 6.4 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush 9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more bpf: fix mm lifecycle in open-coded task_vma iterator 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more bpf, sockmap: Take state lock for af_unix iter 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +17 more +19 more ipv6: fix possible UAF in icmpv6_rcv() 9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more futex: Drop CLONE_THREAD requirement for private default hash alloc 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset 8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more drm/xe/dma-buf: fix UAF with retry loop 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more sctp: purge outqueue on stale COOKIE-ECHO handling 9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 more ipc: limit next_id allocation to the valid ID range 7.8 High
- corewcf CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution 6.2 Medium
- nokogiri Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 1.7 Low
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 more Memory safety bugs fixed in Firefox 152 and Thunderbird 152 8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 more Use-after-free in the Graphics: WebGPU component 9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Use-after-free in the Networking: HTTP component 8.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 more Heap use-after-free in ODF number-format blank-width parsing 5.4 Medium
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 more Heap Use-After-Free in the PKCS7_verify() Function 8.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 more smb: client: reject userspace cifs.spnego descriptions 7.1 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion 7.5 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 more RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 more wifi: mac80211: use safe list iteration in radar detect work 8.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 more wifi: mac80211: remove station if connection prep fails 8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more smb: client: fix potential UAF and double free in smb2_open_file() 9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 more rxrpc: Fix potential UAF after skb_unshare() failure 7.8 High
- ibm http server IBM HTTP Server is affected by multiple vulnerabilities 7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation 7.4 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Use-after-free in the DOM: Bindings (WebIDL) component 7.3 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more ImageMagick: Use-After-Free in MSL decoder. 6.2 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Use-after-free in the JavaScript: WebAssembly component 7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Use-after-free in the DOM: Networking component 7.3 High
- php, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Use-After-Free in SOAP using Apache map 9.5 Critical
- Show olderLoading…