CWE-763 · Memory Corruption
Release of Invalid Pointer or Reference
116CVEs
SortMost likely exploited
116 CVEs with CWE-763 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2007-4367Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."Opera · Opera Browser · 2007-08-15 | – | 8.7% | 2007-08-15 |
| CVE-2015-2695lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (inc…Mit · Kerberos 5 · 2015-11-09 | – | 6.0% | 2015-11-09 |
| CVE-2013-4695Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code ExecutionWinamp · Winamp · 2019-12-27 | – | 5.3% | 2019-12-27 |
| CVE-2020-36224A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.Openldap · Openldap · 2021-01-25 | – | 4.4% | 2021-01-25 |
| CVE-2022-37451Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.Exim · Exim · 2022-08-06 | – | 3.3% | 2022-08-06 |
| CVE-2019-11930An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versio…Facebook · HHVM · 2019-12-04 | – | 3.2% | 2019-12-04 |
| CVE-2021-3682A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to t…Qemu · QEMU · 2021-08-05 | – | 2.9% | 2021-08-05 |
| CVE-2018-6836The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers t…Wireshark · Wireshark · 2018-02-08 | – | 2.7% | 2018-02-08 |
| CVE-2025-25215Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityBroadcom · BCM5820X · CVSS 8.8 · 2025-06-13 | 8.8 | 2.6% | 2025-06-13 |
| CVE-2021-30473aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.Aomedia · Aomedia · 2021-05-06 | – | 2.1% | 2021-05-06 |
| CVE-2020-11105An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problema…Usc · Cereal · 2020-03-30 | – | 2.0% | 2020-03-30 |
| CVE-2021-21401Invalid free() call in Nanopbnanopb · nanopb · CVSS 7.1 · 2021-03-23 | 7.1 | 1.8% | 2021-03-23 |
| CVE-2021-41073loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer…Linux · Linux Kernel · 2021-09-19 | – | 1.8% | 2021-09-19 |
| CVE-2020-5139A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall c…SonicWall · SonicOS · 2020-10-12 | – | 1.8% | 2020-10-12 |
| CVE-2021-24028An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects F…Facebook · Facebook Thrift · 2021-04-13 | – | 1.7% | 2021-04-13 |
| CVE-2020-24371lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.Lua · Lua · 2020-08-17 | – | 1.7% | 2020-08-17 |
| CVE-2020-0103In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional executio…Google · Android · 2020-05-14 | – | 1.6% | 2020-05-14 |
| CVE-2022-28203A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor…Mediawiki · Mediawiki · 2022-09-19 | – | 1.5% | 2022-09-19 |
| CVE-2022-2521It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and den…Libtiff · libtiff · 2022-08-31 | – | 1.3% | 2022-08-31 |
| CVE-2021-22760A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execut…Schneider-Electric · IGSS Definition (Def.exe) V15.0.0.21140 and prior · 2021-06-11 | – | 1.2% | 2021-06-11 |
| CVE-2020-36404Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl.Keystone-Engine · Keystone · 2021-07-01 | – | 1.1% | 2021-07-01 |
| CVE-2019-20202An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segm…Ezxml Project · Ezxml · 2019-12-31 | – | 1.1% | 2019-12-31 |
| CVE-2026-111309Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-11-10 | 8.8 | 1.1% | 2026-11-10 |
| CVE-2026-83889Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.8 · 2026-10-13 | 8.8 | 1.1% | 2026-10-13 |
| CVE-2026-118708Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-11-10 | 8.8 | 0.9% | 2026-11-10 |
| CVE-2019-20170An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.Gpac · Gpac · 2019-12-30 | – | 0.9% | 2019-12-30 |
| CVE-2026-88234Windows iSCSI Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 9.8 · 2026-11-10 | 9.8 | 0.9% | 2026-11-10 |
| CVE-2019-20632An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_private.c…Gpac · Gpac · 2020-03-24 | – | 0.8% | 2020-03-24 |
| CVE-2026-105560Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 7.2 · 2026-11-10 | 7.2 | 0.8% | 2026-11-10 |
| CVE-2025-14233Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affect…Canon Inc. · Satera LBP670C Series · CVSS 9.8 · 2026-01-15 | 9.8 | 0.8% | 2026-01-15 |
| CVE-2020-27545libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.Libdwarf Project · Libdwarf · CVSS 6.5 · 2023-04-15 | 6.5 | 0.8% | 2023-04-15 |
| CVE-2020-9098Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed…Huawei · OceanStor 5310 V5 · 2020-04-30 | – | 0.8% | 2020-04-30 |
| CVE-2025-48768Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removalApache Software Foundation · Apache NuttX RTOS · CVSS 5.3 · 2026-01-01 | 5.3 | 0.8% | 2026-01-01 |
| CVE-2021-45261An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.Gnu · Patch · 2021-12-22 | – | 0.8% | 2021-12-22 |
| CVE-2022-41691BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691F5 · BIG-IP Advanced WAF & ASM · CVSS 7.5 · 2022-10-19 | 7.5 | 0.7% | 2022-10-19 |
| CVE-2019-20631An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can cause a…Gpac · Gpac · 2020-03-24 | – | 0.7% | 2020-03-24 |
| CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindingsRed Hat · Red Hat Enterprise Linux 10 · CVSS 8.5 · 2026-09-08 | 8.5 | 0.7% | 2026-09-08 |
| CVE-2019-19820An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service…Kyrol · Internet Security · 2019-12-16 | – | 0.7% | 2019-12-16 |
| CVE-2023-0459Copy_from_user Spectre-V1 Gadget in Linux KernelLinux · Linux Kernel · CVSS 6.5 · 2023-05-25 | 6.5 | 0.6% | 2023-05-25 |
| CVE-2020-13132An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect erro…Yubico · Libykpiv · CVSS 4.3 · 2020-07-09 | 4.3 | 0.6% | 2020-07-09 |
| CVE-2023-4883Multiple vulnerabilities in Open5GSOpen5GS · Open5GS · CVSS 7.5 · 2023-10-03 | 7.5 | 0.6% | 2023-10-03 |
| CVE-2024-44852Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().Openrobotics · Robot Operating System · CVSS 7.5 · 2024-12-06 | 7.5 | 0.6% | 2024-12-06 |
| CVE-2023-34312In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a wr…Tencent · Qq · CVSS 7.8 · 2023-06-01 | 7.8 | 0.6% | 2023-06-01 |
| CVE-2025-30379Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2025-05-13 | 7.8 | 0.6% | 2025-05-13 |
| CVE-2026-96993Windows Performance Monitor Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-11-10 | 7.5 | 0.6% | 2026-11-10 |
| CVE-2024-6607Leaving pointerlock by pressing the escape key could be preventedMozilla · Firefox · CVSS 8.8 · 2024-07-09 | 8.8 | 0.6% | 2024-07-09 |
| CVE-2021-40042There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: Clou…Huawei · Cloudengine 12800 Firmware · 2022-01-31 | – | 0.6% | 2022-01-31 |
| CVE-2025-11838WatchGuard Firebox iked Memory Corruption VulnerabilityWatchGuard · Fireware OS · CVSS 8.7 · 2025-12-04 | 8.7 | 0.5% | 2025-12-04 |
| CVE-2019-18619Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary c…Synaptics · Vfs75xx Firmware · 2020-07-22 | – | 0.5% | 2020-07-22 |
| CVE-2026-15718Invalid pointer in the JavaScript: WebAssembly componentMozilla · Firefox · CVSS 4.3 · 2026-07-14 | 4.3 | 0.5% | 2026-07-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.