Use After Free — CVEs by weakness type

Android MEDIUM 6.7

CVE-2019-9276

In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to…

Mitigation only

Fix from $1,600 2019-09-06

Android MEDIUM 6.7

CVE-2019-9442

In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege…

Mitigation only

Fix from $1,600 2019-09-06

Libslirp HIGH 7.5

CVE-2019-15890

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

Patch available

Fix from $1,950 2019-09-06

Android HIGH 7.8

CVE-2019-2174

In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper…

Patch available

Fix from $1,950 2019-09-05

Linux Kernel MEDIUM 5.5

CVE-2018-21008

An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net…

Fix: 4.16.7+

Fix from $1,600 2019-09-04

Linux Kernel HIGH 7.0

CVE-2019-15917

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() …

Fix: 3.13 / 4.9.202+

Fix from $1,950 2019-09-04

Debian Linux HIGH 7.8

CVE-2019-14533

The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.

Patch available

Fix from $1,950 2019-08-29

Debian Linux HIGH 7.8

CVE-2019-14777

The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.

Patch available

Fix from $1,950 2019-08-29

Debian Linux HIGH 7.8

CVE-2019-14778

The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.

Patch available

Fix from $1,950 2019-08-29

Ubuntu Linux CRITICAL 9.8

CVE-2019-15717

Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.

Fix: 1.2.2+

Fix from $2,300 2019-08-29

Zephyr HIGH 7.8

CVE-2017-14201

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execut…

Fix: 1.14.0+

Fix from $1,950 2019-08-29

Rust Openssl CRITICAL 9.8

CVE-2018-20997

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

Fix: 0.10.9+

Fix from $2,300 2019-08-26

Libflate CRITICAL 9.8

CVE-2019-15552

An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution.

Fix: 0.1.25+

Fix from $2,300 2019-08-26

Design Review HIGH 7.8

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF…

Patch available

Fix from $1,950 2019-08-23

Acrobat Dc CRITICAL 9.8

CVE-2019-8061

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 201…