Advisories · Weakness
CWE-590.
Every Advisory and CVE whose sources give the weakness CWE-590, newest first.
- CVSS 5.3 Medium
libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
- mz-automation libiec61850
- Memory corruption
- CWE-590
- CVSS 6.5 Medium
Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs
- Qt_for_MCUs
- Memory corruption
- CWE-590
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- Cisco NX-OS Software
- CWE-590
- CVSS 5.9 Medium
ImageMagick: Invalid Memory Free in MVG decoder
- ImageMagick
- CWE-590
- CVSS 9.6 CriticalCritical · CVSS 9+
Google Chrome: Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote…
- Google Chrome
- CWE-590
- CVSS 7.4 High
PCRE2: In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being…
- PCRE2
- CWE-590
- CVSS 6.9 Medium
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
- mz-automation libiec61850
- CWE-590
- CVSS 5.5 Medium
Avast antivirus use of stack memory after free when scanning a malformed PE file
- Gen Digital Avast Antivirus
- Gen Digital AVG Antivirus
- CWE-590
- CVSS 6.1 Medium
Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
- Canonical Ubuntu Linux
- CWE-590
- CVSS 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-590
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- CWE-590
- CVSS 5.6 Medium
Multiple vulnerabilities in SAP MDM Server
- SAP_SE SAP MDM Server
- CWE-590
- CVSS 7.5 High
Multiple vulnerabilities in SAP MDM Server
- SAP_SE SAP MDM Server
- CWE-590
- CVSS 7.5 High
Multiple vulnerabilities in SAP MDM Server
- SAP_SE SAP MDM Server
- CWE-590
- CVSS 4.8 Medium
GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
- GNU PSPP
- CWE-590
- CVSS 9.0 CriticalCritical · CVSS 9+
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- CWE-590
- CVSS 8.6 High
Malformed DATA submessage leads to bad-free error in Fast-DDS
- eProsima Fast-DDS
- Memory corruption
- CWE-590
- CVSS 7.8 High
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c.
- Denial of service
- CWE-590
- CVSS 7.0 High
Ichitaro: An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro…
- Ichitaro
- CWE-590
- CVSS 7.5 High
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
- gssapi gss-ntlmssp
- CWE-590
- CVSS 7.7 High
Heap buffer overflow in finfo_buffer
- PHP
- CWE-590
- CVSS 8.1 High
Freeing unallocated memory in php_pgsql_free_params()
- PHP
- Memory corruption
- CWE-590
- CVSS 7.8 High
Free of static data in accountsservice
- Ubuntu accountsservice
- CWE-590
-
busybox: An attacker-controlled pointer free in Busybox's hush applet leads to denial of service…
- busybox
- CWE-590
- CVSS 6.3 Medium
Wrong type for `Linker`-define functions when used across two `Engine`s
- Memory corruption
- CWE-590
<0.30.0 · fixed in 0.30.0
GHSA-q879-9g95-56mx · CVE-2021-39216 -
Game Networking Sockets: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable…
- Game Networking Sockets
- CWE-590