CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morenet: bonding: fix use-after-free after 802.3ad slave unbind7.8 High
- linux, linux kernel +1 morenetfilter: nf_tables: avoid skb access on nf_stolen7.8 High
- linux, linux kernel +1 morescsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI8.8 High
- linux, linux kernel +1 moremedia: pci: cx23885: Fix the error handling in cx23885_initdev()7.8 High
- linux, linux kernel +1 moreNFC: NULL out the dev->rfkill to prevent UAF7.8 High
- linux, linux kernel +1 moreusbnet: Run unregister_netdev() before unbind() again7.8 High
- linux, linux kernel +1 moreASoC: rt5645: Fix errorenous cleanup order7.8 High
- linux, linux kernel +1 moredrm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume7.8 High
- linux, linux kernel +1 moremt76: fix tx status related use-after-free race on station removal8.8 High
- linux, linux kernel +1 moreBluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout7.8 High
- linux, linux kernel +1 moreBluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event8.8 High
- linux, linux kernel +1 moreerofs: fix buffer copy overflow of ztailpacking feature7.8 High
- linux, linux kernel +1 morevideo: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup7.8 High
- linux, linux kernel +1 moremacsec: fix UAF bug for real_dev7.8 High
- linux, linux kernel +1 moreubi: ubi_create_volume: Fix use-after-free when volume creation failed7.8 High
- linux, linux kernel +1 moredriver: base: fix UAF when driver_attach failed7.8 High
- linux, linux kernel +1 moreblk-mq: don't touch ->tagset in blk_mq_get_sq_hctx7.8 High
- linux, linux kernel +1 moredrm/panfrost: Job should reference MMU not file_priv7.8 High
- linux, linux kernel +1 morecrypto: ccree - Fix use after free in cc_cipher_exit()7.8 High
- linux, linux kernel +1 morepowerpc/pseries: Fix use after free in remove_phb_dynamic()7.8 High
- linux, linux kernel +1 morenet: hns3: add vlan list lock to protect vlan list7.8 High
- linux, linux kernel +1 morebfq: fix use-after-free in bfq_dispatch_request7.8 High
- linux, linux kernel +1 morebtrfs: do not clean up repair bio if submit fails7.8 High
- linux, linux kernel +1 moreref_tracker: implement use-after-free detection7.0 High
- linux, linux kernel +1 moredrbd: Fix five use after free bugs in get_initial_state7.8 High
- linux, linux kernel +1 morescsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()7.8 High
- linux, linux kernel +1 moreRDMA/hfi1: Fix use-after-free bug for mm struct7.8 High
- linux, linux kernel +1 morenfc: nci: add flush_workqueue to prevent uaf7.8 High
- linux, linux kernel +1 morescsi: target: tcmu: Fix possible page UAF7.8 High
- linux, linux kernel +1 moreep93xx: clock: Fix UAF in ep93xx_clk_register_gate()7.8 High
- linux, linux kernel +1 morejffs2: fix use-after-free in jffs2_clear_xattr_subsystem7.8 High
- linux, linux kernel +1 moremedia: davinci: vpif: fix use-after-free on driver unbind7.8 High
- linux, linux kernel +1 moreubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl7.8 High
- zoom workplace, zoom communications, inc workplace apps and sdks, zoom meeting software development kit +3 more +5 moreZoom Workplace Apps and SDKs - Divide By Zero4.3 Medium
- zoom workplace, zoom communications, inc workplace apps and sdks, zoom meeting software development kit +3 more +5 moreZoom Workplace Apps and SDKs - Use After Free4.3 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursor7.8 High
- linux, linux kernel +1 moreio_uring/rw: split io_read() into a helper7.8 High
- google chromeUse after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to...8.8 High
- exiv2Use After Free in Exiv25.3 Medium
- vim, netapp hci compute node +1 moreheap-use-after-free in function str_to_reg in vim/vim4.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unload6.4 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - bios +1 more +3 morenetem: Update sch->q.qlen before qdisc_tree_reduce_backlog()7.8 High
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...7.8 High
- google chromeUse after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to...8.1 High
- google chromeUse after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to...8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: sched: Disallow replacing of child qdisc from one parent to another7.8 High
- No product listedUse after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows...7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morehrtimers: Handle CPU state correctly on hotplug7.8 High
- Show moreLoading…