CWE-416

Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2,Oj::Parse

Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, disabling sy

Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Pars

Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerabl

Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the syste

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a sound

sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite func

sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite agg

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap r

Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consume

Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of s

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, i

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

Windows OLE Remote Code Execution Vulnerability

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This v

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recyc

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing

SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function.

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichanne

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate kr

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding s

In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authenticatio

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue co

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock Af

In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Ru

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message wh

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoi

A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_brea

In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after fr

In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use afte

In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after

In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This c

In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflict

In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_s