The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().
Volume of CVEs assigned to CWE-590 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-31627CRITICAL In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be us | Jul 28, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-42377CRITICAL An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishan | Nov 15, 2021 | 9.8 | 31 | NO | NO |
CVE-2025-32911CRITICAL A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory c | Apr 15, 2025 | 9.0 | 28 | NO | NO |
CVE-2022-31625HIGH In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may le | Jun 16, 2022 | 8.1 | 28 | NO | NO |
CVE-2020-6016CRITICAL Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-B | Nov 18, 2020 | 9.8 | 26 | NO | NO |
CVE-2026-20810HIGH Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Jan 13, 2026 | 7.8 | 25 | NO | NO |
CVE-2021-3939HIGH Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed | Nov 17, 2021 | 7.8 | 25 | NO | NO |
CVE-2026-47328MEDIUM Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking alloca | May 28, 2026 | 6.1 | 24 | NO | NO |
CVE-2025-54899HIGH Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Sep 9, 2025 | 7.8 | 24 | NO | NO |
CVE-2023-22291HIGH An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack poin | Apr 5, 2023 | 7.8 | 24 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.