CWE-590 · 23 records

Free of Memory not on the Heap

CVEs in this class

23 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2020-6016No exploit	Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_Receivevalvesoftware · game networking sockets · CWE-590 pre-auth RCE	Critical9.8	—	6.0%	Nov 18, 2020
40Plan	CVE-2021-42377No exploit	An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a craftebusybox · busybox · CWE-590 pre-auth RCE	Critical9.8	—	3.6%	Nov 15, 2021
40Plan	CVE-2022-31627No exploit	Heap buffer overflow in finfo_bufferphp · php · CWE-590 Pre-auth	Critical9.8	—	2.1%	Jul 28, 2022
39Monitor	CVE-2026-76465No exploit	Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerabilitycisco · cisco nx-os software · CWE-590 pre-auth RCE	Critical9.8	—	0.4%	Oct 7, 2026
38Monitor	CVE-2026-95311No exploit	Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiagoogle · chrome · CWE-590 pre-auth RCE	Critical9.6	—	0.3%	Sep 29, 2026
36Monitor	CVE-2025-32911No exploit	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valuered hat · red hat enterprise linux 7 extended lifecycle support · CWE-590 Pre-auth	Critical9.0	—	0.9%	Apr 15, 2025
33Monitor	CVE-2022-31625No exploit	Freeing unallocated memory in php_pgsql_free_params()php · php · CWE-590 pre-auth RCE	High8.1	—	3.7%	Jun 16, 2022
31Monitor	CVE-2024-6197No exploit	freeing stack buffer in utf8asn1strhaxx · libcurl · CWE-590 Pre-auth Denial of service	High7.5	—	4.2%	Jul 24, 2024
31Monitor	CVE-2025-54899No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-590 RCE	High7.8	—	0.5%	Sep 9, 2025
31Monitor	CVE-2026-20810No exploit	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-590 Local privilege escalation	High7.8	—	0.4%	Jan 13, 2026
31Monitor	CVE-2023-22291No exploit	An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600.justsystems · ichitaro 2022 · CWE-590	High7.8	—	0.4%	Apr 5, 2023
31Monitor	CVE-2021-3939No exploit	Free of static data in accountsservicecanonical · accountsservice · CWE-590	High7.8	—	0.3%	Nov 17, 2021
31Monitor	CVE-2026-89161No exploit	In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.pcre · pcre2 · CWE-590	High7.8	—	0.1%	Sep 11, 2026
30Monitor	CVE-2023-25565No exploit	GSS-NTLMSSP vulnerable to incorrect free when decoding target informationgss-ntlmssp project · gss-ntlmssp · CWE-590 Pre-auth Denial of service	High7.5	—	1.1%	Feb 14, 2023
30Monitor	CVE-2025-42994No exploit	Multiple vulnerabilities in SAP MDM Serversap_se · sap mdm server · CWE-590 Pre-auth Denial of service	High7.5	—	0.4%	Jun 9, 2025
30Monitor	CVE-2026-106578No exploit	ImageMagick: Invalid Memory Free in MVG decoderimagemagick · imagemagick · CWE-590 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2025-42995No exploit	Multiple vulnerabilities in SAP MDM Serversap_se · sap mdm server · CWE-590 Pre-auth Denial of service	High7.5	—	0.4%	Jun 9, 2025
24Monitor	CVE-2026-47328No exploit	Invalid pointer deallocation in Ubuntu Linux AppArmor notification handlingcanonical · ubuntu linux · CWE-590 Local privilege escalation	Medium6.1	—	0.0%	May 28, 2026
22Monitor	CVE-2026-18582No exploit	mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapmz-automation · libiec61850 · CWE-590 Pre-auth	Medium5.5	—	0.8%	Aug 3, 2026
22Monitor	CVE-2025-42996No exploit	Multiple vulnerabilities in SAP MDM Serversap_se · sap mdm server · CWE-590 Pre-auth	Medium5.6	—	0.2%	Jun 9, 2025
22Monitor	CVE-2025-7006No exploit	Avast antivirus use of stack memory after free when scanning a malformed PE filegen digital · avast antivirus · CWE-590 Denial of service	Medium5.5	—	0.1%	Jun 12, 2026
21Monitor	CVE-2026-68908No exploit	libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send pathmz-automation · libiec61850 · CWE-590 Pre-auth Denial of service	Medium5.3	—	0.4%	Oct 16, 2026
7Monitor	CVE-2025-5899No exploit	GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapgnu · pspp · CWE-590	Low1.9	—	0.1%	Jun 9, 2025

CVE-2020-6016
41Plan
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_Receive
CriticalCVSS 9.8No exploitEPSS 6%
- pre-auth RCE
valvesoftware · game networking socketsNov 18, 2020
CVE-2021-42377
40Plan
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafte
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
busybox · busyboxNov 15, 2021
CVE-2022-31627
40Plan
Heap buffer overflow in finfo_buffer
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
php · phpJul 28, 2022
CVE-2026-76465
39Monitor
Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
cisco · cisco nx-os softwareOct 7, 2026
CVE-2026-95311
38Monitor
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentia
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeSep 29, 2026
CVE-2025-32911
36Monitor
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 7 extended lifecycle supportApr 15, 2025
CVE-2022-31625
33Monitor
Freeing unallocated memory in php_pgsql_free_params()
HighCVSS 8.1No exploitEPSS 3%
- pre-auth RCE
php · phpJun 16, 2022
CVE-2024-6197
31Monitor
freeing stack buffer in utf8asn1str
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Denial of service
haxx · libcurlJul 24, 2024
CVE-2025-54899
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
microsoft · 365 appsSep 9, 2025
CVE-2026-20810
31Monitor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1809Jan 13, 2026
CVE-2023-22291
31Monitor
An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600.
HighCVSS 7.8No exploitEPSS 0%
justsystems · ichitaro 2022Apr 5, 2023
CVE-2021-3939
31Monitor
Free of static data in accountsservice
HighCVSS 7.8No exploitEPSS 0%
canonical · accountsserviceNov 17, 2021
CVE-2026-89161
31Monitor
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.
HighCVSS 7.8No exploitEPSS 0%
pcre · pcre2Sep 11, 2026
CVE-2023-25565
30Monitor
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
gss-ntlmssp project · gss-ntlmsspFeb 14, 2023
CVE-2025-42994
30Monitor
Multiple vulnerabilities in SAP MDM Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
sap_se · sap mdm serverJun 9, 2025
CVE-2026-106578
30Monitor
ImageMagick: Invalid Memory Free in MVG decoder
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2025-42995
30Monitor
Multiple vulnerabilities in SAP MDM Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
sap_se · sap mdm serverJun 9, 2025
CVE-2026-47328
24Monitor
Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
MediumCVSS 6.1No exploitEPSS 0%
- Local privilege escalation
canonical · ubuntu linuxMay 28, 2026
CVE-2026-18582
22Monitor
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
MediumCVSS 5.5No exploitEPSS 0%
- Pre-auth
mz-automation · libiec61850Aug 3, 2026
CVE-2025-42996
22Monitor
Multiple vulnerabilities in SAP MDM Server
MediumCVSS 5.6No exploitEPSS 0%
- Pre-auth
sap_se · sap mdm serverJun 9, 2025
CVE-2025-7006
22Monitor
Avast antivirus use of stack memory after free when scanning a malformed PE file
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
gen digital · avast antivirusJun 12, 2026
CVE-2026-68908
21Monitor
libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
mz-automation · libiec61850Oct 16, 2026
CVE-2025-5899
7Monitor
GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
LowCVSS 1.9No exploitEPSS 0%
gnu · psppJun 9, 2025

All vulnerability classes