Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2024-10-07 CVE-2024-23370 Use After Free vulnerability in Qualcomm products
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.
local
low complexity
qualcomm CWE-416
6.7
2024-10-07 CVE-2024-23376 Use After Free vulnerability in Qualcomm products
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
local
low complexity
qualcomm CWE-416
6.7
2024-10-07 CVE-2024-33069 Use After Free vulnerability in Qualcomm products
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
network
low complexity
qualcomm CWE-416
7.5
2024-10-07 CVE-2024-38399 Use After Free vulnerability in Qualcomm products
Memory corruption while processing user packets to generate page faults.
local
low complexity
qualcomm CWE-416
7.8
2024-10-07 CVE-2024-43047 Use After Free vulnerability in Qualcomm products
Memory corruption while maintaining memory maps of HLOS memory.
local
low complexity
qualcomm CWE-416
7.8
2024-09-30 CVE-2024-7675 Use After Free vulnerability in Autodesk Navisworks 2025/2025.1/2025.2
A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free.
local
low complexity
autodesk CWE-416
7.8
2024-09-28 CVE-2024-23923 Use After Free vulnerability in Alpsalpine Ilx-F509 Firmware 6.0.000
Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability.
low complexity
alpsalpine CWE-416
8.8
2024-09-27 CVE-2024-46831 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error.
local
low complexity
linux CWE-416
7.8
2024-09-27 CVE-2024-46842 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted mailbox commands regardless of return status.
local
low complexity
linux CWE-416
5.5
2024-09-27 CVE-2024-46845 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat tracer can use user space threads to check for osnoise and timer latency.
local
low complexity
linux CWE-416
7.8