CWE-825: Expired Pointer Dereference
The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.
Also known as Dangling pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewriteback: Fix use after free in inode_switch_wbs_work_fn()7.8 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin6.6 Medium
- hmbrand text::csv xs, text\ +1 moreText::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption8.4 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the JavaScript Engine component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the WebRTC component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the DOM: Core & HTML component7.5 High
arduinoUbuntuA stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0....5.3 Medium- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption7.8 High
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +22 more +24 moreUse-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure9.1 Critical
- hdfgroup hdf5, red hat enterprise linux ai (rhel ai) 3 +1 moreHDF5: H5T__conv_struct Use After Free7.8 High
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 moreElectron: Use-after-free in offscreen child window paint callback8.1 High
- freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 moreLibinput: libinput: information disclosure via dangling pointer in lua plugin handling3.3 Low
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset6.7 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake6.5 Medium
- squid-cache squid, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreSquid vulnerable to Denial of Service in ICP Request handling9.2 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Layout: Text and Fonts component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the CSS Parsing and Computation component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to use-after-free in the Disability Access APIs component10.0 Critical
- libfuse, red hat enterprise linux 7, enterprise linux 8 +2 moreUse After Free in libfuse7.8 High
- vshakitskiy eweewe: Loop with Unreachable Exit Condition ('Infinite Loop')7.5 High
- giflib, red hat ai inference server 3.2, ai inference server 3.3 +18 more +20 moreGiflib contains a double-free vulnerability that is the result of a shallow copy in...5.1 Medium
- color iccdevHeap-use-after-free in CIccCmm::AddXform()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenet/sched: Enforce that teql can only be used as root qdisc7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreFreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread8.7 High
- mongodb c driver, php driver +1 moreBulk write with options may read invalid memory6.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlan4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-free4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-free4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()4.9 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvt5.5 Medium
- gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibxml: null pointer dereference leads to denial of service (dos)7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)9.1 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash6.0 Medium
- lenovo hx1331 certified node (thinkagile) bios, hx2330 appliance (thinkagile) bios, hx2331 certified node (thinkagile) bios +112 more +114 moreAn internal product security audit discovered a UEFI SMM (System Management Mode) callout...6.7 Medium
- wiresharkExpired Pointer Dereference in Wireshark7.8 High
- f5 nginx plusNGINX Plus MQTT vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP SSL vulnerability5.9 Medium
- libbiosig project libbiosig, fedoraproject fedora +1 moreA use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project...9.8 Critical
- squid-cache squidSQUID-2023:11 Denial of Service in Cache Manager6.5 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.8 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.4 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.7 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution Vulnerability6.8 Medium
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution Vulnerability9.1 Critical
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution Vulnerability9.8 Critical
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution Vulnerability8.8 High
- cisco secure endpoint, secure endpoint private cloud +1 moreA vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to...7.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare28.8 High
- Show moreLoading…