CWE-590 · weakness in Memory Corruption
Free of Memory not on the Heap
24 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.
- Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-…
- freeing stack buffer in utf8asn1str
- Freeing unallocated memory in php_pgsql_free_params()
- An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell misha…
- Heap buffer overflow in finfo_buffer
- GSS-NTLMSSP vulnerable to incorrect free when decoding target information
- Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
- mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
- Microsoft Excel Remote Code Execution Vulnerability
- Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack poi…
- libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
- Multiple vulnerabilities in SAP MDM Server
- Multiple vulnerabilities in SAP MDM Server
- ImageMagick: Invalid Memory Free in MVG decoder
- Free of static data in accountsservice
- Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
- Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
- Multiple vulnerabilities in SAP MDM Server
- GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
- In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
- Avast antivirus use of stack memory after free when scanning a malformed PE file
- Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.