Skip to content
BackEsc
Sign in

CWE-763 · weakness in Memory Corruption

Release of Invalid Pointer or Reference

116 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 116 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."CVE-2007-43678.7% likely
  2. lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (inc…CVE-2015-26956.0% likely
  3. Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code ExecutionCVE-2013-46955.3% likely
  4. A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.CVE-2020-362244.4% likely
  5. Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.CVE-2022-374513.3% likely
  6. An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versio…CVE-2019-11930Facebook · 3.2% likely

    Meta (Facebook)

  7. A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to t…CVE-2021-3682QEMU · 2.9% likely
  8. The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers t…CVE-2018-68362.7% likely
  9. Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityCVE-2025-25215Broadcom · CVSS 8.8 · 2.6% likely

    Broadcom

  10. aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.CVE-2021-304732.1% likely
  11. An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problema…CVE-2020-111052.0% likely
  12. Invalid free() call in NanopbCVE-2021-21401nanopb · CVSS 7.1 · 1.8% likely
  13. loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer…CVE-2021-410731.8% likely
  14. A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall c…CVE-2020-5139SonicWall · 1.8% likely

    SonicWall

  15. An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects F…CVE-2021-24028Facebook · 1.7% likely

    Meta (Facebook)

  16. lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.CVE-2020-243711.7% likely
  17. In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional executio…CVE-2020-0103Android · 1.6% likely
  18. A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor…CVE-2022-282031.5% likely
  19. It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and den…CVE-2022-2521libtiff · 1.3% likely
  20. A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execut…CVE-2021-22760IGSS Definition (Def.exe) V15.0.0.21140 and prior · 1.2% likely
  21. Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl.CVE-2020-364041.1% likely
  22. An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segm…CVE-2019-202021.1% likely
  23. Microsoft Office Outlook Remote Code Execution VulnerabilityCVE-2026-111309Microsoft · CVSS 8.8 · 1.1% likely

    Microsoft

  24. Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-83889Microsoft · CVSS 8.8 · 1.1% likely

    Microsoft

  25. Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-118708Microsoft · CVSS 8.8 · 0.9% likely

    Microsoft

  26. An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.CVE-2019-201700.9% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in