CWE-825 · Memory Corruption
Expired Pointer Dereference
59CVEs
SortMost likely exploited
59 CVEs with CWE-825 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-23638SQUID-2023:11 Denial of Service in Cache Managersquid-cache · squid · CVSS 6.5 · 2024-01-23 | 6.5 | 60% | 2024-01-23 |
| CVE-2019-15691TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an ex…Kaspersky · TigerVNC · 2019-12-26 | – | 4.7% | 2019-12-26 |
| CVE-2023-20212A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabili…Cisco · Cisco Secure Endpoint · CVSS 7.5 · 2023-08-18 | 7.5 | 3.4% | 2023-08-18 |
| CVE-2024-23310A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can…The Biosig Project · libbiosig · CVSS 9.8 · 2024-02-20 | 9.8 | 1.7% | 2024-02-20 |
| CVE-2023-48694Azure RTOS USBX Remote Code Execution Vulnerabilityazure-rtos · usbx · CVSS 6.8 · 2023-12-05 | 6.8 | 1.3% | 2023-12-05 |
| CVE-2023-48696Azure RTOS USBX Remote Code Execution Vulnerabilityazure-rtos · usbx · CVSS 6.7 · 2023-12-05 | 6.7 | 0.9% | 2023-12-05 |
| CVE-2025-49794Libxml: heap use after free (uaf) leads to denial of service (dos)Siemens · libxml2 · CVSS 9.1 · 2025-06-16 | 9.1 | 0.9% | 2025-06-16 |
| CVE-2026-52924sctp: purge outqueue on stale COOKIE-ECHO handlingLinux · Linux · CVSS 9.8 · 2026-06-24 | 9.8 | 0.7% | 2026-06-24 |
| CVE-2024-39792NGINX Plus MQTT vulnerabilityF5 · NGINX Plus · CVSS 7.5 · 2024-08-14 | 7.5 | 0.6% | 2024-08-14 |
| CVE-2026-32873ewe: Loop with Unreachable Exit Condition ('Infinite Loop')vshakitskiy · ewe · CVSS 7.5 · 2026-03-20 | 7.5 | 0.6% | 2026-03-20 |
| CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos)GNOME · libxml2 · CVSS 7.5 · 2025-06-16 | 7.5 | 0.6% | 2025-06-16 |
| CVE-2026-58592Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM IntegrationLadybirdBrowser · Ladybird · CVSS 8.3 · 2026-07-01 | 8.3 | 0.5% | 2026-07-01 |
| CVE-2026-2436Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshakeRed Hat · Red Hat Enterprise Linux 10 · CVSS 6.5 · 2026-03-26 | 6.5 | 0.5% | 2026-03-26 |
| CVE-2026-78123strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.strongSwan · strongSwan · CVSS 5.9 · 2026-09-11 | 5.9 | 0.5% | 2026-09-11 |
| CVE-2024-28889BIG-IP SSL vulnerabilityF5 · BIG-IP · CVSS 5.9 · 2024-05-08 | 5.9 | 0.4% | 2024-05-08 |
| CVE-2026-102010Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifRed Hat · Red Hat Enterprise Linux 10 · CVSS 7 · 2026-09-28 | 7.0 | 0.4% | 2026-09-28 |
| CVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`AcademySoftwareFoundation · OpenImageIO · CVSS 5.3 · 2026-09-18 | 5.3 | 0.4% | 2026-09-18 |
| CVE-2026-77220PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formattingmichaelrsweet · pdfio · CVSS 6.5 · 2026-08-21 | 6.5 | 0.4% | 2026-08-21 |
| CVE-2026-53006ipv6: fix possible UAF in icmpv6_rcv()Linux · Linux · CVSS 9.8 · 2026-06-24 | 9.8 | 0.4% | 2026-06-24 |
| CVE-2026-8854IBM HTTP Server is affected by multiple vulnerabilitiesIBM · HTTP Server · CVSS 7.5 · 2026-05-26 | 7.5 | 0.4% | 2026-05-26 |
| CVE-2026-45972smb: client: fix potential UAF and double free in smb2_open_file()Linux · Linux · CVSS 9.8 · 2026-05-27 | 9.8 | 0.3% | 2026-05-27 |
| CVE-2024-8250Expired Pointer Dereference in WiresharkWireshark Foundation · Wireshark · CVSS 7.8 · 2024-08-28 | 7.8 | 0.3% | 2024-08-28 |
| CVE-2026-53175inet: frags: fix use-after-free caused by the fqdir_pre_exit() flushLinux · Linux · CVSS 9.8 · 2026-06-25 | 9.8 | 0.3% | 2026-06-25 |
| CVE-2026-46125wifi: mac80211: remove station if connection prep failsLinux · Linux · CVSS 8.8 · 2026-05-28 | 8.8 | 0.3% | 2026-05-28 |
| CVE-2026-42057An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of servic…vtk · vtk · CVSS 7.5 · 2026-10-29 | 7.5 | 0.3% | 2026-10-29 |
| CVE-2026-41216An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service…vtk · vtk · CVSS 7.5 · 2026-10-29 | 7.5 | 0.3% | 2026-10-29 |
| CVE-2026-34001Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionRed Hat · Red Hat Enterprise Linux 10 · CVSS 7.8 · 2026-04-23 | 7.8 | 0.3% | 2026-04-23 |
| CVE-2025-30653Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crashJuniper Networks · Junos OS · CVSS 6.5 · 2025-04-09 | 6.5 | 0.3% | 2025-04-09 |
| CVE-2026-76891Expired Pointer Dereference in WiresharkWireshark Foundation · Wireshark · CVSS 3.1 · 2026-08-19 | 3.1 | 0.2% | 2026-08-19 |
| CVE-2026-76890Expired Pointer Dereference in WiresharkWireshark Foundation · Wireshark · CVSS 3.1 · 2026-08-19 | 3.1 | 0.2% | 2026-08-19 |
| CVE-2026-52923ipc: limit next_id allocation to the valid ID rangeLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2025-12119Bulk write with options may read invalid memoryMongoDB · C Driver · CVSS 6.8 · 2025-11-18 | 6.8 | 0.2% | 2025-11-18 |
| CVE-2026-46166wifi: mac80211: use safe list iteration in radar detect workLinux · Linux · CVSS 8.8 · 2026-05-28 | 8.8 | 0.2% | 2026-05-28 |
| CVE-2026-52976drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()Linux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2026-52973futex: Drop CLONE_THREAD requirement for private default hash allocLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2026-19939Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruptionzephyrproject · zephyr · CVSS 6.3 · 2026-10-13 | 6.3 | 0.2% | 2026-10-13 |
| CVE-2026-52950drm/xe/dma-buf: fix UAF with retry loopLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2026-52952iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to resetLinux · Linux · CVSS 8.8 · 2026-06-24 | 8.8 | 0.2% | 2026-06-24 |
| CVE-2026-53085bpf: fix mm lifecycle in open-coded task_vma iteratorLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2025-10911Libxslt: use-after-free with key data stored cross-rvtRedhat · libxslt · CVSS 5.5 · 2025-09-25 | 5.5 | 0.2% | 2025-09-25 |
| CVE-2024-45105An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated…Lenovo · HX5530 Appliance (ThinkAgile) BIOS · CVSS 6.7 · 2024-09-13 | 6.7 | 0.2% | 2024-09-13 |
| CVE-2026-86845Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupRed Hat · Red Hat Enterprise Linux 10 · CVSS 6.5 · 2026-10-14 | 6.5 | 0.2% | 2026-10-14 |
| CVE-2026-10671User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)zephyrproject · zephyr · CVSS 7.1 · 2026-07-14 | 7.1 | 0.2% | 2026-07-14 |
| CVE-2025-54770Grub2: use-after-free in net_set_vlanGNU · grub2 · CVSS 4.9 · 2025-11-18 | 4.9 | 0.2% | 2025-11-18 |
| CVE-2025-54771Grub2: use-after-free in grub_file_close()GNU · grub2 · CVSS 4.9 · 2025-11-18 | 4.9 | 0.2% | 2025-11-18 |
| CVE-2026-42014Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinRedhat · gnutls · CVSS 6.6 · 2026-06-16 | 6.6 | 0.1% | 2026-06-16 |
| CVE-2025-61664Grub2: missing unregister call for normal_exit command may lead to use-after-freeGNU · grub2 · CVSS 4.9 · 2025-11-18 | 4.9 | 0.1% | 2025-11-18 |
| CVE-2026-35094Libinput: libinput: information disclosure via dangling pointer in lua plugin handlingRed Hat · Red Hat Enterprise Linux 10 · CVSS 3.3 · 2026-04-01 | 3.3 | 0.1% | 2026-04-01 |
| CVE-2026-46176RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()Linux · Linux · CVSS 7.8 · 2026-05-28 | 7.8 | 0.1% | 2026-05-28 |
| CVE-2025-61663Grub2: missing unregister call for normal commands may lead to use-after-freeGNU · grub2 · CVSS 4.9 · 2025-11-18 | 4.9 | 0.1% | 2025-11-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.