Double Free

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack...

UBUNTU-CVE-2022-31625

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...

Halibut 资源管理错误漏洞

Halibut is a secure, RPC-based open source communication framework. Halibut version 1.2 contains a denial-of-service vulnerability that stems from a mix-up in the cleanupindex directive in index.c, which is responsible for freeing memory. An attacker could exploit this vulnerability to cause a...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. previous versions of GPAC v2.1.0-DEV are vulnerable to a memory mis-reference vulnerability, which stems from a confusion in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to potentially cause th...

radare2 资源管理错误漏洞

Radare2 is a set of libraries and tools for working with binaries. a post-release reuse vulnerability exists in versions of Radare2 prior to 5.6.6, which stems from a confusion in the opissetbp directive responsible for freeing memory in radare2 5.6.6. An attacker could exploit this vulnerability...

PT-2022-4484 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 7.4.x through 7.4.29 PHP versions 8.0.x through 8.0.19 PHP versions 8.1.x through 8.1.6 Description: The issue is related to the pg query params function in PHP's Postgres database extension, where supplying invalid parameters to...

Memory leak in decoding PNG images

Impact When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling png::CommonInitDecode..., &decode, the decode value contains allocated buffers which can only be freed by calling png::CommonFreeDecode&decode. However, several error case in the function...

PT-2024-11180 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's nvmet module, where it attempts to free memory from the wrong pool, causing a crash. Specifically, when a p2p device is found but the p2p poo...

PT-2024-11329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been resolved in the Linux kernel. The issue occurred in the probe function when the final serial config fails, causing the info variable to leak. A resource handling...

CVE-2021-30473

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap...

CVE-2021-30473

CVE-2021-30473 affects libaom (AOMedia) specifically the aom_image.c path; the flaw stems from freeing memory not allocated on the heap in versions prior to 2021-04-07. This is reported across multiple advisories (e.g., Gentoo GLSA 202401-32, Debian DSA-5490-1) and is tied to memory-management we...

CVE-2021-30473

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap...

EulerOS Virtualization for ARM 64 3.0.6.0 : cairo (EulerOS-SA-2021-1547)

According to the version of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with...

EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1262)

According to the version of the cairo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to...

cairo 1.16.0 in cairo_ft_apply_variations() in cairo-ft-font.c would free memory using a free function incompatible with WebKit's fastMalloc leading to an application crash with a "free(): invalid pointer" error.

...

CVE-2018-11838

Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, MDM9640, SDA660,...

CVE-2018-5744

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1, and versions 9.10.7-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 of th...

LAquis SCADA LGX Report Memory Free Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9557

In reallyinstallpackage of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...