Use After Free — CVEs by weakness type

Android CRITICAL 9.8

CVE-2019-2205

In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote co…

Mitigation only

Fix from $2,300 2019-11-13

Blink MEDIUM 6.5

CVE-2011-2334

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.

Mitigation only

Fix from $1,600 2019-11-12

Internet Explorer HIGH 7.5

CVE-2019-1429 KEVEPSS 73%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engi…

Patch available

Fix from $1,950 2019-11-12

Blink MEDIUM 6.5

CVE-2011-2353

Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.

Mitigation only

Fix from $1,600 2019-11-07

Linux Kernel CRITICAL 9.8

CVE-2019-18814

An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/…

Fix: after 5.3.9

Fix from $2,300 2019-11-07

Mdm9150 Firmware MEDIUM 5.5

CVE-2019-10515

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Con…

Patch available

Fix from $1,600 2019-11-06

Mdm9150 Firmware HIGH 7.8

CVE-2019-10524

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdrago…

Patch available

Fix from $1,950 2019-11-06

Mdm9206 Firmware CRITICAL 9.8

CVE-2019-10528

Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon C…

Patch available

Fix from $2,300 2019-11-06

Mdm9150 Firmware HIGH 8.1

CVE-2019-10529

Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon A…

Patch available

Fix from $1,950 2019-11-06

Freertos\+fat HIGH 7.5

CVE-2019-18178

Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by f…

No fix yet

Fix from $1,950 2019-11-04

Linux Kernel HIGH 7.0

CVE-2019-18683

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux d…

Fix: 4.4.204 / 4.9.204+

Fix from $1,950 2019-11-04

Phantompdf HIGH 8.8

CVE-2019-17140EPSS 5%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is r…

Patch available

Fix from $1,950 2019-10-25

Phantompdf HIGH 8.8

CVE-2019-17141EPSS 5%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is r…

Patch available

Fix from $1,950 2019-10-25

Phantompdf HIGH 8.8

CVE-2019-17142EPSS 6%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is r…

Mitigation only

Fix from $1,950 2019-10-25

Debian Linux HIGH 7.5

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED si…

Fix: 3.4.0+

Fix from $1,950 2019-10-24

Ubuntu Linux HIGH 7.5

CVE-2019-18197

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to…

Patch available

Fix from $1,950 2019-10-18

Acrobat Dc HIGH 8.8

CVE-2019-8217

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a…