Skip to content
OpenAdvisories

Weakness (CWE)

CWE-763: Release of Invalid Pointer or Reference

Base Incomplete

The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

How to prevent it (4 mitigations)

  1. Implementation

    Only call matching memory management functions. Do not mix and match routines. For example, when you allocate a buffer with malloc(), dispose of the original pointer with free().

  2. Implementation

    When programming in C++, consider using smart pointers provided by the boost library to help correctly and consistently manage memory.

  3. Architecture and Design

    Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.

    For example, glibc in Linux provides protection against free of invalid pointers.

  4. Architecture and Design

    Use a language that provides abstractions for memory allocation and deallocation.

Source: MITRE CWE-763

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-68908

    libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting_RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write…

    MZ Automation libIEC61850
  • Medium 5.8
    CVE-2026-16005

    Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craf…

    ASUS Armoury Crate
  • Medium 6.4
    CVE-2023-20511

    Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double …

    AMD AMD Radeon™ PRO V620 Graphics Products AMD Radeon™ Instinct™ MI25 Graphics Products
  • Medium 4.3
    CVE-2026-15718 Public exploit

    Invalid pointer in the JavaScript: WebAssembly component

    We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 5.5
    CVE-2026-47312

    Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This …

    Samsung Open Source escargot
  • Medium 5.5
    CVE-2025-65116

    Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

    Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Wind…

    Hitachi JP1/NETM/DM Client Job Management Partner 1/Software Distribution Client JP1/IT Desktop Management 2 - Operations Director
  • Medium 6.2
    CVE-2018-25243

    FastTube 1.0.1.0 Denial of Service via Search

    FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trig…

    FastTube FastTube
  • Medium 6.5
    CVE-2026-22770

    ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

    ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the last element in the set is n…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu NuGet
  • Medium 5.3
    CVE-2025-48768

    Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal

    Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger (that is disabled by default), NULL pointer dereference …

    Apache Software Foundation Apache NuttX RTOS
  • Medium 5.3
    CVE-2025-54333

    An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer D…

  • Medium 5.9
    CVE-2024-25074

    An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exyno…

  • Medium 6.5
    CVE-2023-0459

    Copy_from_user Spectre-V1 Gadget in Linux Kernel

    Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend u…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.5
    CVE-2020-27545

    libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid lin…

    dwarfutils dwarfutils Debian Ubuntu
  • Medium 6.2
    CVE-2022-25725

    Use-after-Free in MODEM

    Denial of service in MODEM due to improper pointer handling

    Qualcomm Snapdragon
  • Medium 5.5
    CVE-2020-28941

    An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu