Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to explo…

CVE-2021-34956HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to e…

CVE-2021-34957HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to e…

CVE-2021-34958HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploi…

CVE-2021-34959HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to expl…

CVE-2021-34960HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to expl…

CVE-2021-34961HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit…

CVE-2021-34962HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to explo…

CVE-2021-34963HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to ex…

CVE-2021-34964HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exp…

CVE-2021-34965HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to ex…

CVE-2021-34966HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required…

CVE-2021-34967HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploi…

CVE-2021-34968HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to expl…

CVE-2021-34969MEDIUMCVSS 5.5EG 3.3

2024-05-07

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to ex…

CVE-2021-3497HIGHCVSS 7.8EG 7.8

2021-04-19

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

CVE-2021-34972MEDIUMCVSS 5.5EG 3.3

2024-05-07

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to expl…

CVE-2021-34973MEDIUMCVSS 5.5EG 3.3

2024-05-07

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required…

CVE-2021-34974HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit thi…

CVE-2021-34975HIGHCVSS 7.8EG 7.8

2024-05-07

Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to expl…

CVE-2021-34976MEDIUMCVSS 5.5EG 3.3

2024-05-07

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required…

CVE-2021-35077HIGHCVSS 8.4EG 7.8

2022-02-11

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CVE-2021-35115HIGHCVSS 8.4EG 7.8

2022-04-01

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

CVE-2021-35120MEDIUMCVSS 6.7EG 6.7

2022-06-14

Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CVE-2021-35130HIGHCVSS 8.4EG 7.8

2022-06-14

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVE-2021-35133MEDIUMCVSS 6.7EG 6.7

2022-09-02

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CVE-2021-3516HIGHCVSS 7.8EG 7.8

2021-06-01

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, a…

CVE-2021-3518HIGHCVSS 8.8EG 8.8

2021-05-18

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidenti…

CVE-2021-3543MEDIUMCVSS 6.7EG 6.7

2021-06-01

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate t…

CVE-2021-3564MEDIUMCVSS 5.5EG 5.5

2021-06-08

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all t…

CVE-2021-35981HIGHCVSS 7.8EG 7.8

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

CVE-2021-35983HIGHCVSS 7.8EG 7.8

2021-08-20

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

CVE-2021-36008LOWCVSS 3.3EG 3.3

2021-08-20

Adobe Illustrator version 25.2.3 (and earlier) is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in…

CVE-2021-36055HIGHCVSS 7.8EG 7.8

2021-09-01

XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v…

CVE-2021-36081HIGHCVSS 7.8EG 7.8

2021-07-01

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

CVE-2021-36084LOWCVSS 3.3EG 3.3

2021-07-01

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).

CVE-2021-36085LOWCVSS 3.3EG 3.3

2021-07-01

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).

CVE-2021-36086LOWCVSS 3.3EG 3.3

2021-07-01

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).

CVE-2021-36144HIGHCVSS 7.5EG 7.5

2021-07-02

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.

CVE-2021-36145HIGHCVSS 7.5EG 7.5

2021-07-02

The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.

CVE-2021-3640HIGHCVSS 7.0EG 7.0

2022-03-03

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sen…

CVE-2021-36408MEDIUMCVSS 5.5EG 5.5

2022-01-10

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.

CVE-2021-36976MEDIUMCVSS 6.5EG 6.5

2021-07-20

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

CVE-2021-36980MEDIUMCVSS 5.5EG 5.5

2021-07-20

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

CVE-2021-3700MEDIUMCVSS 6.4EG 6.4

2022-02-24

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a…

CVE-2021-37045CRITICALCVSS 9.8EG 9.8

2021-12-08

There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.

CVE-2021-37122MEDIUMCVSS 6.5EG 6.5

2021-10-27

There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 1…

CVE-2021-3715HIGHCVSS 7.8EG 7.8

2022-03-02

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged…

CVE-2021-37159MEDIUMCVSS 6.4EG 6.4

2021-07-21

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

CVE-2021-37179HIGHCVSS 7.8EG 7.8

2021-08-10

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free conditi…

CWE-416— Use After Free

CVEs classified under CWE-416page 44 of 139

Map vulnerabilities like CWE-416 to your infrastructure