Skip to content
Noroxi

CWE-763 · 100 records

Release of Invalid Pointer or Reference

CVEs in this class

100 records

  • CVE-2007-4367
    40Plan

    Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an inva

    CriticalCVSS 9.3No exploitEPSS 8%

    opera · opera browserAug 15, 2007

  • CVE-2019-11930
    40Plan

    An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution.

    CriticalCVSS 9.8No exploitEPSS 3%

    facebook · hhvmDec 4, 2019

  • CVE-2018-6836
    40Plan

    The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory a

    CriticalCVSS 9.8No exploitEPSS 2%

    wireshark · wiresharkFeb 8, 2018

  • CVE-2021-30473
    40Plan

    aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.

    CriticalCVSS 9.8No exploitEPSS 2%

    aomedia · aomediaMay 6, 2021

  • CVE-2020-11105
    40Plan

    An issue was discovered in USC iLab cereal through 1.3.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    usc · cerealMar 30, 2020

  • CVE-2021-24028
    40Plan

    An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other un

    CriticalCVSS 9.8No exploitEPSS 1%

    facebook · thriftApr 13, 2021

  • CVE-2020-0103
    39Monitor

    In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption.

    CriticalCVSS 9.8No exploitEPSS 1%

    google · androidMay 14, 2020

  • CVE-2024-44852
    39Monitor

    Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thet

    CriticalCVSS 9.8No exploitEPSS 0%

    openrobotics · robot operating systemDec 6, 2024

  • CVE-2026-22770
    39Monitor

    ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

    CriticalCVSS 9.8No exploitEPSS 0%

    imagemagick · imagemagickJan 19, 2026

  • CVE-2025-14233
    37Monitor

    Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th

    CriticalCVSS 9.3No exploitEPSS 0%

    canon · lbp1238 ii firmwareJan 15, 2026

  • CVE-2025-25215
    36Monitor

    Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    broadcom · bcm5820xJun 13, 2025

  • CVE-2021-3682
    35Monitor

    A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2.

    HighCVSS 8.5No exploitEPSS 2%

    qemu · qemuAug 5, 2021

  • CVE-2026-83889
    35Monitor

    Windows DNS Server Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · windows 10 1607Oct 13, 2026

  • CVE-2026-97011
    35Monitor

    Microsoft Office Excel Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    microsoft · 365 appsOct 13, 2026

  • CVE-2024-6607
    35Monitor

    Leaving pointerlock by pressing the escape key could be prevented

    HighCVSS 8.8No exploitEPSS 0%

    mozilla · firefoxJul 9, 2024

  • CVE-2026-74947
    35Monitor

    Privilege escalation due to invalid pointer in the Graphics component

    HighCVSS 8.8No exploitEPSS 0%

    mozilla · firefoxAug 18, 2026

  • CVE-2026-84131
    35Monitor

    Privilege escalation due to invalid pointer in the Graphics component

    HighCVSS 8.8No exploitEPSS 0%

    mozilla · firefoxSep 1, 2026

  • CVE-2022-42309
    35Monitor

    Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during

    HighCVSS 8.8No exploitEPSS 0%

    xen · xenNov 1, 2022

  • CVE-2026-100813
    35Monitor

    Invalid pointer in the JavaScript Engine: JIT component

    HighCVSS 8.8No exploitEPSS 0%

    mozilla · firefoxSep 29, 2026

  • CVE-2025-11838
    34Monitor

    WatchGuard Firebox iked Memory Corruption Vulnerability

    HighCVSS 8.7No exploitEPSS 0%

    watchguard · firewareDec 4, 2025

  • CVE-2026-74860
    34Monitor

    Libxml2: double-free/uaf in libxml2 python bindings

    HighCVSS 8.5No exploitEPSS 0%

    red hat · red hat enterprise linux 10Sep 8, 2026

  • CVE-2025-13824
    34Monitor

    Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

    HighCVSS 8.7No exploitEPSS 0%

    rockwell automation · micro820®, micro850®, micro870®Dec 15, 2025

  • CVE-2013-4695
    33Monitor

    Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution

    HighCVSS 7.8Proof of conceptEPSS 5%

    winamp · winampDec 27, 2019

  • CVE-2021-41073
    32Monitor

    loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFE

    HighCVSS 7.8Proof of conceptEPSS 1%

    linux · linux kernelSep 19, 2021

  • CVE-2020-36224
    31Monitor

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting

    HighCVSS 7.5No exploitEPSS 4%

    openldap · openldapJan 26, 2021

All vulnerability classes