There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute.

CVE-2021-22350HIGHCVSS 7.5EG 7.5

2021-06-30

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause the device to crash and restart.

CVE-2021-22353HIGHCVSS 7.5EG 7.5

2021-06-30

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause the kernel to restart.

CVE-2021-22390CRITICALCVSS 9.8EG 9.8

2021-08-02

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.

CVE-2021-22463MEDIUMCVSS 5.5EG 5.5

2021-10-28

A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure.

CVE-2021-22466MEDIUMCVSS 5.5EG 5.5

2021-10-28

A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

CVE-2021-22478MEDIUMCVSS 5.5EG 5.5

2022-02-25

The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information leakage.

CVE-2021-22545HIGHCVSS 7.5EG 7.5

2021-06-29

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade…

CVE-2021-22662HIGHCVSS 7.8EG 7.8

2021-03-03

A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

CVE-2021-22759HIGHCVSS 7.8EG 7.8

2021-06-11

A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS…

CVE-2021-22808HIGHCVSS 7.8EG 7.8

2022-01-28

A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build …

CVE-2021-22893CRITICALCVSS 10.0EG 10.0⚠ KEV

2021-04-23

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated…

CVE-2021-22901HIGHCVSS 8.1EG 8.1

2021-06-11

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances …

CVE-2021-22930CRITICALCVSS 9.8EG 9.8

2021-10-07

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

CVE-2021-22940HIGHCVSS 7.5EG 7.5

2021-08-16

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

CVE-2021-23134HIGHCVSS 7.8EG 7.8

2021-05-12

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW ca…

CVE-2021-24037CRITICALCVSS 9.8EG 9.8

2021-06-15

A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable i…

CVE-2021-24067HIGHCVSS 7.8EG 7.8

2021-02-25

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-24070HIGHCVSS 7.8EG 7.8

2021-02-25

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-25370MEDIUMCVSS 6.1EG 9.0⚠ KEV

2021-03-26

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

CVE-2021-25394MEDIUMCVSS 6.4EG 9.0⚠ KEV

2021-06-11

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

CVE-2021-25443MEDIUMCVSS 5.3EG 5.3

2021-08-05

A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.

CVE-2021-25786MEDIUMCVSS 5.3EG 8.8

2023-08-11

An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf.

CVE-2021-26194MEDIUMCVSS 6.5EG 6.5

2021-06-10

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.

CVE-2021-26199MEDIUMCVSS 6.5EG 6.5

2021-06-10

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file.

CVE-2021-26411HIGHCVSS 8.8EG 9.0⚠ KEV

2021-03-11

Internet Explorer Memory Corruption Vulnerability

CVE-2021-26689CRITICALCVSS 9.8EG 9.8

2021-02-04

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-200031 (February 2021).

CVE-2021-26900HIGHCVSS 7.8EG 7.8

2021-03-11

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-27031HIGHCVSS 7.8EG 7.8

2021-04-19

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbi…

CVE-2021-27037HIGHCVSS 7.8EG 7.8

2021-07-09

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malici…

CVE-2021-27267HIGHCVSS 7.8EG 7.8

2021-03-30

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

CVE-2021-27268HIGHCVSS 7.8EG 7.8

2021-03-30

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

CVE-2021-27347MEDIUMCVSS 5.5EG 5.5

2021-06-10

Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted compressed file.

CVE-2021-27377CRITICALCVSS 9.8EG 9.8

2021-02-18

An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.

CVE-2021-27646CRITICALCVSS 9.8EG 9.8

2021-03-12

Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

CVE-2021-27649CRITICALCVSS 9.8EG 9.8

2021-06-23

Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.

CVE-2021-28305CRITICALCVSS 9.8EG 9.8

2021-03-12

An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.

CVE-2021-28454HIGHCVSS 7.8EG 7.8

2021-04-13

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-28550HIGHCVSS 8.8EG 9.0⚠ KEV

2021-09-02

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability t…

CVE-2021-28552HIGHCVSS 7.8EG 7.8

2021-08-24

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability …

CVE-2021-28553HIGHCVSS 8.8EG 8.8

2021-09-02

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability …

CVE-2021-28562HIGHCVSS 8.8EG 8.8

2021-06-28

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability when executing search queries through Javascript. An unauthentic…

CVE-2021-28593LOWCVSS 3.3EG 3.3

2021-08-20

Adobe Illustrator version 25.2.3 (and earlier) is affected by a Use After Free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information i…

CVE-2021-28631HIGHCVSS 7.8EG 7.8

2021-08-24

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability …

CVE-2021-28632HIGHCVSS 7.8EG 7.8

2021-08-24

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability …

CVE-2021-28635HIGHCVSS 7.8EG 7.8

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve…

CVE-2021-28639HIGHCVSS 7.8EG 7.8

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

CVE-2021-28640HIGHCVSS 7.3EG 7.3

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve …

CVE-2021-28641HIGHCVSS 7.8EG 7.8

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

CVE-2021-28663HIGHCVSS 8.8EG 9.0⚠ KEV

2021-05-10

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28…

CWE-416— Use After Free

CVEs classified under CWE-416page 39 of 139

Map vulnerabilities like CWE-416 to your infrastructure