CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreusb: xhci: Fix isochronous Ring Underrun/Overrun event handling7.8 High
- linux, linux kernel +1 moredrm/xe: Use local fence in error path of xe_migrate_clear7.8 High
- linux, linux kernel +1 morescsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue7.8 High
- debian linux, linux kernel +1 moredrm/amdkfd: Fix mode1 reset crash issue7.8 High
- debian linux, linux kernel +1 moreKVM: arm64: Tear down vGIC on failed vCPU creation8.8 High
- linux, linux kernel +1 moretracing: fprobe events: Fix possible UAF on modules7.8 High
- pixmeo osirix mdPixmeo OsiriX MD Use After Free6.9 Medium
- pixmeo osirix mdPixmeo OsiriX MD Use After Free8.7 High
- debian linux, linux kernel +1 morenet_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too7.8 High
- debian linux, linux kernel +1 moreirqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()7.8 High
- google chromeUse after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to...8.8 High
- qualcomm fastconnect 7800 firmware, snapdragon 8 gen 3 mobile firmware, wcd9390 firmware +5 more +7 moreUse After Free in Secure Processor6.6 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreUse After Free in Camera Driver7.8 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +21 more +23 moreUse After Free in Camera Driver7.8 High
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +61 more +63 moreUse After Free in HLOS7.8 High
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +78 more +80 moreUse After Free in HLOS6.6 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca6174a firmware +19 more +21 moreUse After Free in DSP Service7.8 High
- linux, linux kernel +1 morenet: caif: Fix use-after-free in cfusbl_device_notify()7.8 High
- linux, linux kernel +1 morePCI: s390: Fix use-after-free of PCI resources with per-function hotplug7.8 High
- linux, linux kernel +1 moreloop: Fix use-after-free issues7.8 High
- linux, linux kernel +1 morenfc: st-nci: Fix use after free bug in ndlc_remove due to race condition7.8 High
- linux, linux kernel +1 morevp_vdpa: fix the crash in hot unplug with vp_vdpa7.8 High
- linux, linux kernel +1 moreftrace: Fix invalid address access in lookup_rec() when index is 07.8 High
- linux, linux kernel +1 morescsi: mpi3mr: Bad drive in topology results kernel crash7.8 High
- dassault systèmes solidworks edrawingsUse-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- debian linux, linux kernel +1 morenet_sched: hfsc: Fix a UAF vulnerability in class handling7.8 High
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ Operator denial of service6.5 Medium
- linux, linux kernel +1 morenet: sched: Fix use after free in red_enqueue()7.8 High
- linux, linux kernel +1 morenetfilter: nf_tables: release flow rule object from commit path7.8 High
- linux, linux kernel +1 moreftrace: Fix use-after-free for dynamic ftrace_ops7.8 High
- linux, linux kernel +1 moreASoC: core: Fix use-after-free in snd_soc_exit()7.8 High
- linux, linux kernel +1 morebpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()7.8 High
- linux, linux kernel +1 morenilfs2: fix use-after-free bug of ns_writer on remount7.8 High
- linux, linux kernel +1 morekprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case7.8 High
- linux, linux kernel +1 moreceph: avoid putting the realm twice when decoding snaps fails9.8 Critical
- linux, linux kernel +1 morentfs: fix use-after-free in ntfs_attr_find()7.8 High
- linux, linux kernel +1 morewifi: at76c50x: fix use after free access in at76_disconnect7.8 High
- linux, linux kernel +1 morenet: dsa: free routing table on probe failure7.8 High
- debian linux, linux kernel +1 moreksmbd: Fix dangling pointer in krb_authenticate9.8 Critical
- linux, linux kernel +1 moreksmbd: fix use-after-free in __smb2_lease_break_noti()8.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in smb_break_all_levII_oplock()8.8 High
- debian linux, linux kernel +1 moredrm/nouveau: prime: fix ttm_bo_delayed_delete oops7.8 High
- linux, linux kernel +1 moredrm/imagination: take paired job reference7.8 High
- linux, linux kernel +1 moresmb: client: fix UAF in decryption with multichannel9.8 Critical
- debian linux, linux kernel +1 moreext4: ignore xattrs past end7.8 High
- debian linux, linux kernel +1 moresctp: detect and prevent references to a freed transport in sendmsg7.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +264 more +266 moreUse After Free in GPS HLOS Driver7.8 High
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows access to already freed memory7.8 High
- arm 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- powerdns dnsdistDenial of service via crafted DoH exchange7.5 High
- Show moreLoading…