CWE-763 Release of Invalid Pointer or Reference
baseThe product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (172)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-4695US | high7.8 | Exploit | ||
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution | ||||
| CVE-2022-23222US | high7.8 | Exploit | ||
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer type… | ||||
| CVE-2021-41073US | high7.8 | Exploit | ||
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer,… | ||||
| CVE-2026-31787US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
xen/privcmd: fix double free via VMA splitting
privcmd_vm_ops defines .close (privcmd_close), but neither .may… | ||||
| CVE-2023-34312US | high7.8 | Exploit | ||
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a wri… | ||||
| CVE-2021-42377US | critical9.8 | — | ||
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishan… | ||||
| CVE-2021-30473US | critical9.8 | — | ||
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. | ||||
| CVE-2021-24028US | critical9.8 | — | ||
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Fa… | ||||
| CVE-2020-0103US | critical9.8 | — | ||
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution… | ||||
| CVE-2020-11105US | critical9.8 | — | ||
An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problemat… | ||||
| CVE-2019-11930US | critical9.8 | — | ||
An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all version… | ||||
| CVE-2018-6836US | critical9.8 | — | ||
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to… | ||||
| CVE-2007-4367US | high9.3 | — | ||
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer." | ||||
| CVE-2026-22770US | critical9.8 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBil… | ||||
| CVE-2024-44852US | critical9.8 | — | ||
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan(). | ||||
| CVE-2021-21401US | high7.1 | Exploit | ||
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()… | ||||
| CVE-2026-97011US | high8.8 | — | ||
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83889US | high8.8 | — | ||
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2023-29536US | high8.8 | — | ||
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially e… | ||||
| CVE-2022-42309US | high8.8 | — | ||
Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resultin… | ||||
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan