Vulnerabilities > Release of Invalid Pointer or Reference

DATE CVE VULNERABILITY TITLE RISK
2019-12-27 CVE-2013-4695 Release of Invalid Pointer or Reference vulnerability in Winamp 5.63
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
local
low complexity
winamp CWE-763
7.8
2019-12-04 CVE-2019-11930 Release of Invalid Pointer or Reference vulnerability in Facebook Hhvm
An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution.
network
low complexity
facebook CWE-763
critical
9.8
2019-09-27 CVE-2019-9290 Release of Invalid Pointer or Reference vulnerability in Google Android 10.0
In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions.
local
low complexity
google CWE-763
7.8
2018-02-08 CVE-2018-6836 Release of Invalid Pointer or Reference vulnerability in Wireshark
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
network
low complexity
wireshark CWE-763
critical
9.8
2018-01-24 CVE-2017-18075 Release of Invalid Pointer or Reference vulnerability in multiple products
crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
local
low complexity
linux canonical CWE-763
7.8
2017-08-09 CVE-2017-0731 Release of Invalid Pointer or Reference vulnerability in Google Android
A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder).
local
low complexity
google CWE-763
7.8