CVE-2019-18178

Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFREE, which (by default) is a macro definition of vPortFree(), but it is reused to flush modified file content from the cache to disk by the function FF_FlushCache().

• CWE-416

• https://sourceforge.net/p/freertos/bugs/199/Exploit, Third Party Advisory
• https://sourceforge.net/p/freertos/bugs/199/Exploit, Third Party Advisory

Published

Nov 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1813A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1814A vulnerability in the interactions between the DHCP and TFT…8.6
• CVE-2019-1815A security vulnerability was discovered in the local status …5.3
• CVE-2019-1816A vulnerability in the log subscription subsystem of the Cis…7.8
• CVE-2019-1817A vulnerability in the web proxy functionality of Cisco Asyn…7.5
• CVE-2019-18177In certain Citrix products, information disclosure can be ac…6.5
• CVE-2019-18179An issue was discovered in Open Ticket Request System (OTRS)…4.3
• CVE-2019-1818A vulnerability in the web-based management interface of Cis…6.5
• CVE-2019-18180Improper Check for filenames with overly long extensions in …7.5
• CVE-2019-18181In CloudVision Portal all releases in the 2018.1 and 2018.2 …7.8
• CVE-2019-18182pacman before 5.2 is vulnerable to arbitrary command injecti…9.8
• CVE-2019-18183pacman before 5.2 is vulnerable to arbitrary command injecti…9.8