Use After Free — CVEs by weakness type

Prusaslicer HIGH 7.8

CVE-2020-28594

A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit …

No fix yet

Fix from $1,950 2021-08-17

Firefox HIGH 8.8

CVE-2021-29985

A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects …

Fix: 78.13.0 / 91.0+

Fix from $1,950 2021-08-17

Node.js HIGH 7.5

CVE-2021-22940EPSS 14%

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption…

Fix: 1.0.1.1 / 12.22.5+

Fix from $1,950 2021-08-16

Tensorflow MEDIUM 6.6

CVE-2021-37690

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `Mu…

Fix: 2.3.4 / 2.4.3+

Fix from $1,600 2021-08-13

Tensorflow HIGH 7.8

CVE-2021-37652

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnse…

Fix: 2.3.4 / 2.4.3+

Fix from $1,950 2021-08-12

Windows 10 1809 HIGH 7.8

CVE-2021-34486 KEVEPSS 9%

Windows Event Tracing Elevation of Privilege Vulnerability

Fix: 10.0.17763.2114 / 10.0.18363.1734+

Fix from $1,950 2021-08-12

Graphics Driver MEDIUM 5.5

CVE-2021-0012

Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to po…

Fix: 15.40.47.5166 / 15.45.33.5164+

Fix from $1,600 2021-08-11

Debian Linux HIGH 8.8

CVE-2020-21688

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.

Patch available

Fix from $1,950 2021-08-10

Debian Linux MEDIUM 6.5

CVE-2020-21697

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a cr…

Patch available

Fix from $1,600 2021-08-10

Live555 MEDIUM 6.5

CVE-2021-38381

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Fre…

Fix: 2021.08.09+

Fix from $1,600 2021-08-10

Live555 MEDIUM 6.5

CVE-2021-38382

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-Afte…

Fix: 2021.08.06+

Fix from $1,600 2021-08-10

Owntone Server CRITICAL 9.8

CVE-2021-38383

OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.

Fix: after 28.1

Fix from $2,300 2021-08-10

Solid Edge Se2021 Firmware HIGH 7.8

CVE-2021-37179

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper va…

Patch available

Fix from $1,950 2021-08-10

Linux Kernel MEDIUM 6.8

CVE-2021-38204

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free a…

Fix: 5.13.6+

Fix from $1,600 2021-08-08

Heapless HIGH 7.5

CVE-2020-36464

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without consid…

Fix: 0.6.1+

Fix from $1,950 2021-08-08

Pdf Reader HIGH 8.8

CVE-2021-21831

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document…

No fix yet

Fix from $1,950 2021-08-05

Pdf Reader HIGH 8.8

CVE-2021-21870

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document…

No fix yet

Fix from $1,950 2021-08-05

Pdf Reader HIGH 8.8

CVE-2021-21893

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893. A specially crafted PDF document…

No fix yet

Fix from $1,950 2021-08-05

Android MEDIUM 5.3

CVE-2021-25443

A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.

Mitigation only

Fix from $1,600 2021-08-05

Firefox HIGH 8.8

CVE-2021-29970

A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered …

Fix: 78.12 / 90.0+

Fix from $1,950 2021-08-05

Firefox HIGH 8.8

CVE-2021-29972

A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may ha…

Fix: 90.0+

Fix from $1,950 2021-08-05

Pdf Reader HIGH 7.8

CVE-2021-34849