CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Digital Media Elevation of Privilege Vulnerability7.8 High
- microsoft 365 copilot, office for android, office for universal +36 more +38 moreWin32k Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWin32k Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.1 High
- c-aresc-ares has a use-after-free in read_answers()8.3 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +29 more +31 moreUse After Free in Automotive Linux OS7.8 High
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +42 more +44 moreUse After Free in Data Network Stack & Connectivity6.6 Medium
- qualcomm c-v2x 9150 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +66 more +68 moreUse After Free in HLOS6.6 Medium
opensslcrates.iorust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`6.3 Medium- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- tukaani-project xz, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreXZ has a heap-use-after-free bug in threaded .xz decoder8.7 High
- linux, linux kernel +1 morenet: atm: fix use after free in lec_send()8.6 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: fix UAF in proc_get_inode()7.8 High
- google chromeUse after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker...8.8 High
- linux, linux kernel +1 morewifi: cfg80211: cancel wiphy_work before freeing wiphy7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd8.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix slab-use-after-free on hdcp_work7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_free_work_struct8.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in smb2_lock8.8 High
- linux, linux kernel +1 morerapidio: fix an API misues when rio_add_net() fails7.8 High
- linux, linux kernel +1 moreHID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()7.8 High
- linux, linux kernel +1 moreHID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()7.8 High
- linux, linux kernel +1 moreHID: hid-steam: Fix use-after-free when detaching device7.8 High
- linux, linux kernel +1 morecdx: Fix possible UAF error in driver_override_show()7.0 High
- linux, linux kernel +1 morefuse: revert back to __readahead_folio() for readahead7.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free triggered by XSLTProcessor6.5 Medium
- google androidIn afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free....7.8 High
- qualcomm fastconnect 7800 firmware, qmp1000 firmware, sm8735 firmware +23 more +25 moreUse After Free in DSP Service7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +145 more +147 moreUse After Free in DSP Service6.7 Medium
- qualcomm csrb31024 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +96 more +98 moreUse After Free in HLOS7.8 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- linux, linux kernel +1 morekeys: Fix UAF in key_put()7.8 High
- hdfgroup hdf5HDF5 H5FL.c H5FL__blk_gc_list use after free4.8 Medium
- linux, linux kernel +1 morenet: nfc: Fix use-after-free in local_cleanup()7.8 High
- linux, linux kernel +1 moreEDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info7.8 High
- linux, linux kernel +1 moreblock, bfq: fix uaf for bfqq in bic_set_bfqq()7.8 High
- linux, linux kernel +1 morebtrfs: always report error in run_one_delayed_ref()7.8 High
- linux, linux kernel +1 moreusb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up7.8 High
- linux, linux kernel +1 moreice: Fix deinitializing VF in error path7.8 High
- linux, linux kernel +1 morebtrfs: fix use-after-free on inode when scanning root during em shrinking7.8 High
- eximA use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to...8.1 High
- luxion keyshotLuxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- imagination technologies graphics ddkGPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails7.8 High
- google chromeUse after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to...8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: allow exp not to be removed in nf_ct_find_expectation7.8 High
- gnome libxsltnumbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...7.8 High
- gnome libxsltxsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion...7.8 High
- Show moreLoading…