CWE-763 Release of Invalid Pointer or Reference
baseThe product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (172)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-4695US | high7.8 | Exploit | ||
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution | ||||
| CVE-2022-23222US | high7.8 | Exploit | ||
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer type… | ||||
| CVE-2021-41073US | high7.8 | Exploit | ||
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer,… | ||||
| CVE-2026-31787US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
xen/privcmd: fix double free via VMA splitting
privcmd_vm_ops defines .close (privcmd_close), but neither .may… | ||||
| CVE-2023-34312US | high7.8 | Exploit | ||
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a wri… | ||||
| CVE-2021-42377US | critical9.8 | — | ||
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishan… | ||||
| CVE-2021-30473US | critical9.8 | — | ||
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. | ||||
| CVE-2021-24028US | critical9.8 | — | ||
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Fa… | ||||
| CVE-2020-0103US | critical9.8 | — | ||
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution… | ||||
| CVE-2020-11105US | critical9.8 | — | ||
An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problemat… | ||||
| CVE-2019-11930US | critical9.8 | — | ||
An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all version… | ||||
| CVE-2018-6836US | critical9.8 | — | ||
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to… | ||||
| CVE-2007-4367US | high9.3 | — | ||
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer." | ||||
| CVE-2026-22770US | critical9.8 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBil… | ||||
| CVE-2024-44852US | critical9.8 | — | ||
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan(). | ||||
| CVE-2021-21401US | high7.1 | Exploit | ||
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()… | ||||
| CVE-2026-97011US | high8.8 | — | ||
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83889US | high8.8 | — | ||
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2023-29536US | high8.8 | — | ||
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially e… | ||||
| CVE-2022-42309US | high8.8 | — | ||
Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resultin… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan