Cyber Resilience

CWE · MITRE source

CWE-763Release of Invalid Pointer or Reference

Abstraction: Base · CVEs in our corpus: 99

The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

This weakness can take several forms, such as:

Last updated: 21 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
  • SA-8 Security and Privacy Engineering Principles
  • SA-15 Development Process, Standards, and Tools
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2018-6836 7.89.80.02722018-02-08
CVE-2019-11930 7.89.80.03252019-12-04
CVE-2021-42377 7.89.80.03382021-11-15
CVE-2020-11105 7.79.80.02042020-03-30
CVE-2021-30473 7.79.80.02052021-05-06
CVE-2020-0103 7.69.80.01612020-05-14
CVE-2021-24028 7.69.80.01752021-04-14
CVE-2024-44852 7.49.80.00592024-12-06
CVE-2025-14233 7.49.80.00782026-01-16
CVE-2026-52993 7.29.80.00372026-06-24
CVE-2022-31625 6.78.10.03672022-06-16
CVE-2024-6607 6.68.80.00562024-07-09
CVE-2025-25215 6.68.80.02062025-06-13
CVE-2013-4695 6.57.80.05282019-12-27
CVE-2021-3682 6.58.50.02882021-08-05
CVE-2020-36224 6.47.50.04302021-01-26
CVE-2022-37451 6.47.50.03242022-08-06
CVE-2026-749476.48.80.00242026-08-18
CVE-2020-5139 6.27.50.01762020-10-12
CVE-2021-41073 6.27.80.01702021-09-19
CVE-2007-4367 6.10.00.08252007-08-15
CVE-2021-22760 6.17.80.01172021-06-11
CVE-2020-36404 6.17.80.01092021-07-01
CVE-2022-28203 6.17.50.01202022-09-19
CVE-2022-42309 6.18.80.00282022-11-01