CWE-590 · Memory Corruption
Free of Memory not on the Heap
24CVEs
SortMost likely exploited
24 CVEs with CWE-590 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-6016Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-…Valvesoftware · Game Networking Sockets · 2020-11-18 | – | 6.0% | 2020-11-18 |
| CVE-2024-6197freeing stack buffer in utf8asn1strcurl · curl · CVSS 7.5 · 2024-07-24 | 7.5 | 4.3% | 2024-07-24 |
| CVE-2022-31625Freeing unallocated memory in php_pgsql_free_params()PHP Group · PHP · CVSS 8.1 · 2022-06-16 | 8.1 | 3.8% | 2022-06-16 |
| CVE-2021-42377An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell misha…busybox · busybox · 2021-11-15 | – | 3.6% | 2021-11-15 |
| CVE-2022-31627Heap buffer overflow in finfo_bufferPHP Group · PHP · CVSS 7.7 · 2022-07-28 | 7.7 | 2.1% | 2022-07-28 |
| CVE-2023-25565GSS-NTLMSSP vulnerable to incorrect free when decoding target informationgssapi · gss-ntlmssp · CVSS 7.5 · 2023-02-14 | 7.5 | 1.1% | 2023-02-14 |
| CVE-2025-32911Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueRedhat · libsoup · CVSS 9 · 2025-04-15 | 9.0 | 1.0% | 2025-04-15 |
| CVE-2026-18582mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapmz-automation · libiec61850 · CVSS 5.3 · 2026-08-03 | 5.3 | 0.9% | 2026-08-03 |
| CVE-2025-54899Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2025-09-09 | 7.8 | 0.6% | 2025-09-09 |
| CVE-2026-20810Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2026-01-13 | 7.8 | 0.5% | 2026-01-13 |
| CVE-2026-76465Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution VulnerabilityCisco · Cisco NX-OS Software · CVSS 9.8 · 2026-10-07 | 9.8 | 0.5% | 2026-10-07 |
| CVE-2023-22291An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack poi…Ichitaro · Ichitaro · CVSS 7 · 2023-04-05 | 7.0 | 0.5% | 2023-04-05 |
| CVE-2026-68908libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send pathmz-automation · libiec61850 · CVSS 5.3 · 2026-10-16 | 5.3 | 0.5% | 2026-10-16 |
| CVE-2025-42994Multiple vulnerabilities in SAP MDM ServerSAP_SE · SAP MDM Server · CVSS 7.5 · 2025-06-10 | 7.5 | 0.5% | 2025-06-10 |
| CVE-2025-42995Multiple vulnerabilities in SAP MDM ServerSAP_SE · SAP MDM Server · CVSS 7.5 · 2025-06-10 | 7.5 | 0.4% | 2025-06-10 |
| CVE-2026-106578ImageMagick: Invalid Memory Free in MVG decoderImageMagick · ImageMagick · CVSS 5.9 · 2026-10-07 | 5.9 | 0.4% | 2026-10-07 |
| CVE-2021-3939Free of static data in accountsserviceUbuntu · accountsservice · CVSS 7.8 · 2021-11-17 | 7.8 | 0.4% | 2021-11-17 |
| CVE-2026-95311Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…Google · Chrome · CVSS 9.6 · 2026-09-29 | 9.6 | 0.3% | 2026-09-29 |
| CVE-2021-39218Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtimebytecodealliance · wasmtime · CVSS 6.3 · 2021-09-17 | 6.3 | 0.3% | 2021-09-17 |
| CVE-2025-42996Multiple vulnerabilities in SAP MDM ServerSAP_SE · SAP MDM Server · CVSS 5.6 · 2025-06-10 | 5.6 | 0.2% | 2025-06-10 |
| CVE-2025-5899GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapGNU · PSPP · CVSS 5.3 · 2025-06-09 | 5.3 | 0.2% | 2025-06-09 |
| CVE-2026-89161In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.PCRE · PCRE2 · CVSS 7.4 · 2026-09-11 | 7.4 | 0.1% | 2026-09-11 |
| CVE-2025-7006Avast antivirus use of stack memory after free when scanning a malformed PE fileGen Digital · Avast Antivirus · CVSS 5.5 · 2026-06-12 | 5.5 | 0.1% | 2026-06-12 |
| CVE-2026-47328Invalid pointer deallocation in Ubuntu Linux AppArmor notification handlingCanonical · Ubuntu Linux · CVSS 6.1 · 2026-05-28 | 6.1 | 0.1% | 2026-05-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.