Use After Free — CVEs by weakness type

Safari HIGH 8.8

CVE-2018-4200EPSS 9%

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is aff…

Fix: 7.5 / 11.1+

Fix from $1,950 2018-06-08

Android HIGH 7.0

CVE-2018-5845

A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases f…

Patch available

Fix from $1,950 2018-06-06

Android HIGH 7.8

CVE-2018-5846

A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUT…

Patch available

Fix from $1,950 2018-06-06

Foxit Reader HIGH 8.8

CVE-2018-3853

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafte…

No fix yet

Fix from $1,950 2018-06-04

Imagemagick HIGH 8.8

CVE-2018-11624

In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file.

Mitigation only

Fix from $1,950 2018-05-31

Vlc Media Player HIGH 8.8

CVE-2018-11516

The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of servic…

No fix yet

Fix from $1,950 2018-05-28

Debian Linux MEDIUM 6.5

CVE-2018-11496

In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size vali…

No fix yet

Fix from $1,600 2018-05-26

Libsass CRITICAL 9.8

CVE-2018-11499

A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause…

Fix: after 3.5.4

Fix from $2,300 2018-05-26

Linux Kernel MEDIUM 5.9

CVE-2018-11412EPSS 16%

In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain cir…

Fix: after 4.16.11

Fix from $1,600 2018-05-24

Mupdf MEDIUM 6.3

CVE-2018-1000039

In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memo…

Fix: after 1.12.0

Fix from $1,600 2018-05-24

Ubuntu Linux CRITICAL 9.8

CVE-2018-11410EPSS 5%

An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a…

Patch available

Fix from $2,300 2018-05-24

Wireshark HIGH 7.5

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoi…

Fix: after 2.4.6

Fix from $1,950 2018-05-22

Imagemagick MEDIUM 6.5

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial…

Fix: 7.0.7-21+

Fix from $1,600 2018-05-18

Vcftools HIGH 7.8

CVE-2018-11129

The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or po…

Mitigation only