Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2019-07-25 CVE-2019-2298 Use After Free vulnerability in Qualcomm products
Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24
local
low complexity
qualcomm CWE-416
7.8
2019-07-25 CVE-2019-2293 Use After Free vulnerability in Qualcomm products
Pointer dereference while freeing IFE resources due to lack of length check of in port resource.
local
low complexity
qualcomm CWE-416
7.8
2019-07-25 CVE-2019-2290 Use After Free vulnerability in Qualcomm products
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016
local
low complexity
qualcomm CWE-416
7.8
2019-07-25 CVE-2019-2263 Use After Free vulnerability in Qualcomm products
Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDM660, SDX20, Snapdragon_High_Med_2016
local
low complexity
qualcomm CWE-416
7.8
2019-07-24 CVE-2019-1010177 Use After Free vulnerability in Jsish 2.4.702.047
Jsish 2.4.70 2.047 is affected by: Use After Free.
network
low complexity
jsish CWE-416
critical
9.8
2019-07-23 CVE-2019-9821 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers.
network
high complexity
mozilla CWE-416
8.1
2019-07-23 CVE-2019-9820 Use After Free vulnerability in Mozilla Firefox ESR
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-9818 Use After Free vulnerability in Mozilla Firefox
A race condition is present in the crash generation server used to generate data for the crash reporter.
network
high complexity
mozilla CWE-416
8.3
2019-07-23 CVE-2019-11713 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-11692 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8