Use After Free — CVEs by weakness type

Chrome HIGH 8.8

CVE-2019-5764

Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a …

Fix: 72.0.3626.81+

Fix from $1,950 2019-02-19

Linux Kernel HIGH 7.8

CVE-2019-8912

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to …

Fix: 4.14.103 / 4.19.25+

Fix from $1,950 2019-02-18

Linux Kernel HIGH 8.1

CVE-2019-6974EPSS 17%

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading …

Fix: 3.16.64 / 3.18.136+

Fix from $1,950 2019-02-15

Netwide Assembler HIGH 7.8

CVE-2019-8343

In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.

No fix yet

Fix from $1,950 2019-02-15

Android HIGH 7.8

CVE-2018-6268

NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service…

Mitigation only

Fix from $1,950 2019-02-13

Android HIGH 7.8

CVE-2018-11962

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading…

Patch available

Fix from $1,950 2019-02-11

Android HIGH 7.8

CVE-2018-12014

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may…

Patch available

Fix from $1,950 2019-02-11

Android HIGH 7.8

CVE-2018-13889

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed

Patch available

Fix from $1,950 2019-02-11

Binaryen MEDIUM 6.5

CVE-2019-7703

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this…

Fix: 64+

Fix from $1,600 2019-02-10

Boolector MEDIUM 5.5

CVE-2019-7560

In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete.

Patch available

Fix from $1,600 2019-02-07

Zelio Soft 2 HIGH 7.8

CVE-2018-7817

A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specia…

Fix: after 5.1

Fix from $1,950 2019-02-06

Firefox CRITICAL 9.8

CVE-2018-18500EPSS 13%

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object…

Fix: 60.5 / 65.0+

Fix from $2,300 2019-02-05

Debian Linux MEDIUM 5.3

CVE-2019-7317EPSS 9%

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Fix: 8.0.23+

Fix from $1,600 2019-02-04

Debian Linux CRITICAL 9.8

CVE-2019-7314

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to …

Fix: 0.95+

Fix from $2,300 2019-02-04

3d MEDIUM 6.5

CVE-2019-6984

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-After-Free …

Fix: 9.4.0.16807+

Fix from $1,600 2019-01-28

Phantompdf HIGH 8.8

CVE-2018-17694

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is …

Fix: after 9.2.0.9297