CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- phpReference counting in php_request_shutdown causes Use-After-Free9.2 Critical
- autodesk autocad, advance steel, autocad architecture +6 more +8 more3DM File Parsing Use-After-Free Vulnerability7.8 High
paredcrates.iopared Vulnerable to Use After Free in `Parc` and `Prc` Due to Missing Lifetime Constraints6.8 Medium- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moregeneve: Fix use-after-free in geneve_find_dev().7.8 High
- linux, linux kernel +1 mores390/ism: add release function for struct device7.8 High
- linux, linux kernel +1 moreibmvnic: Don't reference skb after sending to VIOS8.6 High
- softether vpnSoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the...9.8 Critical
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Apps - Use After Free8.5 High
- microsoft access, office, 365 apps +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +13 more +15 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Domain Name Service Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +3 more +5 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.8 High
- siemens teamcenter visualization v14.3, teamcenter visualization v2312, teamcenter visualization v2406 +5 more +7 moreA vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13)...7.3 High
- google chromeUse after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...8.8 High
- imagination technologies graphics ddkGPU DDK - Exploitable kernel double free on apsFenceSyncCheckpoints allocated with arbitrary size7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: rtlwifi: remove unused check_buddy_priv7.8 High
- linux, linux kernel +1 morebpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing7.8 High
- google chromeUse after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who...8.8 High
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- mozilla firefox, thunderbird +1 moreUse-after-free in WebTransportChild7.5 High
- mozilla firefox, thunderbird +1 moreAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 High
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +237 more +239 moreUse After Free in NPU7.8 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +101 more +103 moreUse After Free in Automotive Android OS7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qmp1000 firmware +35 more +37 moreUse After Free in DSP Service7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreUse After Free in Camera Linux7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qam8295p firmware +28 more +30 moreUse After Free in Audio7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qam8255p firmware +18 more +20 moreUse After Free in Automotive Multimedia7.8 High
- qualcomm ar8035 firmware, c-v2x 9150 firmware, csr8811 firmware +151 more +153 moreUse After Free in MProc7.8 High
- ubiquiti inc unifi protect camerasA Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE)...9.0 Critical
- Show moreLoading…