Vulnerabilities (CVE)

Filtered by CWE-763
Total 106 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-6836 1 Wireshark 1 Wireshark 2026-06-17 7.5 HIGH 9.8 CRITICAL
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2017-18075 2 Canonical, Linux 2 Ubuntu Linux, Linux Kernel 2026-06-17 7.2 HIGH 7.8 HIGH
crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
CVE-2017-0731 1 Google 1 Android 2026-06-17 6.8 MEDIUM 7.8 HIGH
A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363.
CVE-2015-2695 6 Canonical, Debian, Mit and 3 more 9 Ubuntu Linux, Debian Linux, Kerberos 5 and 6 more 2026-06-17 5.0 MEDIUM N/A
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
CVE-2013-4695 1 Winamp 1 Winamp 2026-06-16 6.8 MEDIUM 7.8 HIGH
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVE-2007-4367 1 Opera 1 Opera Browser 2026-06-16 9.3 HIGH N/A
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."