ByteOS Network

Vulnerability Details :

CVE-2023-48024

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-17 Nov, 2023 | 00:00

Updated At-29 Aug, 2024 | 17:27

Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:17 Nov, 2023 | 00:00

Updated At:29 Aug, 2024 | 17:27

▼CVE Numbering Authority (CNA)

Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/howerj/liblisp/issues/1	N/A

Hyperlink: https://github.com/howerj/liblisp/issues/1

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://github.com/howerj/liblisp/issues/1	x_transferred

Hyperlink: https://github.com/howerj/liblisp/issues/1

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:17 Nov, 2023 | 17:15

Updated At:25 Nov, 2023 | 02:23

Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CPE Matches

howerj>>liblisp>>Versions up to 2019-02-08(inclusive)

cpe:2.3:a:howerj:liblisp:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/howerj/liblisp/issues/1	cve@mitre.org	Exploit Issue Tracking

Hyperlink: https://github.com/howerj/liblisp/issues/1

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Similar CVEs

58Records found

CVE-2024-40782

Matching Score-4

Assigner-Apple Inc.

View Details

Matching Score-4

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.45% / 84.59%

7 Day CHG+0.34%

Published-29 Jul, 2024 | 22:17

Updated-13 Feb, 2025 | 17:53

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari visionos macos visionOS iOS and iPadOS tvOS macOS Safari watchOS ios safari watch_os visionos ipad_os mac_os tv_os

CWE ID-CWE-416

Use After Free

CVE-2022-1196

Matching Score-4

Assigner-Mozilla Corporation

View Details

Matching Score-4

Assigner-Mozilla Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.13% / 33.16%

7 Day CHG~0.00%

Published-22 Dec, 2022 | 00:00

Updated-16 Apr, 2025 | 16:15

After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8 and Firefox ESR < 91.8.

Vendor-Mozilla Corporation

Product-firefox_esr thunderbird Firefox ESR Thunderbird

CWE ID-CWE-416

Use After Free

CVE-2018-11496

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.84% / 73.72%

7 Day CHG~0.00%

Published-26 May, 2018 | 20:00

Updated-05 Aug, 2024 | 08:10

In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation.

Vendor-long_range_zip_project n/a Debian GNU/Linux

Product-long_range_zip debian_linux n/a

CWE ID-CWE-416

Use After Free

CVE-2021-38381

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 45.12%

7 Day CHG~0.00%

Published-10 Aug, 2021 | 17:16

Updated-04 Aug, 2024 | 01:37

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.

Vendor-live555 n/a

Product-live555 n/a

CWE ID-CWE-416

Use After Free

CVE-2011-2334

Matching Score-4

Assigner-Chrome

View Details

Matching Score-4

Assigner-Chrome

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 38.09%

7 Day CHG~0.00%

Published-12 Nov, 2019 | 20:55

Updated-06 Aug, 2024 | 23:00

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.

Vendor-Google LLC

Product-blink Chrome

CWE ID-CWE-416

Use After Free

CVE-2024-4949

Matching Score-4

Assigner-Chrome

View Details

Matching Score-4

Assigner-Chrome

CVSS Score-9.6||CRITICAL

EPSS-0.19% / 40.81%

7 Day CHG~0.00%

Published-15 May, 2024 | 20:42

Updated-13 Feb, 2025 | 17:53

Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Vendor-Fedora Project Google LLC

Product-chrome fedora Chrome chrome

CWE ID-CWE-416

Use After Free

CVE-2024-4948

Matching Score-4

Assigner-Chrome

View Details

Matching Score-4

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.19% / 40.81%

7 Day CHG~0.00%

Published-15 May, 2024 | 20:42

Updated-13 Feb, 2025 | 17:53

Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Fedora Project Google LLC

Product-chrome fedora Chrome chrome

CWE ID-CWE-416

Use After Free

CVE-2021-26194

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 46.76%

7 Day CHG~0.00%

Published-10 Jun, 2021 | 22:14

Updated-03 Aug, 2024 | 20:19

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.

Vendor-jerryscript n/a

Product-jerryscript n/a

CWE ID-CWE-416

Use After Free

CVE-2023-48024

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs