CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +19 more +21 moreUse After Free in Bluetooth HOST7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +89 more +91 moreUse After Free in Computer Vision6.6 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +4 more +6 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380...7.8 High
- google chromeUse after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to...8.8 High
- autodesk revitRFA File Parsing Use-After-Free Vulnerability7.8 High
- samsung exynos 2200 firmwareAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free...6.5 Medium
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows access to already freed memory7.8 High
- arm 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- lenovo browserA use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.6827.4 High
- jhead project jheadjhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.7.8 High
- google chromeUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Medium
- google chromeUse after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker...8.8 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple use after free in xcf parser7.3 High
- forestryks process-sync, process-sync-rs +1 moreProcess Sync has a Potential Unsound Issue in SharedMutex2.9 Low
- dynamixsoftware printershare, mobile dynamix printershare mobile print +1 moreKL-001-2025-005: Mobile Dynamix PrinterShare Mobile Print Double-Free Memory Write8.0 High
- linux, linux kernel +1 moreKVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception8.8 High
- linux, linux kernel +1 moreksmbd: Fix UAF in __close_file_table_ids8.8 High
- linux, linux kernel +1 mores390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_session_rpc_open8.8 High
- debian linux, linux kernel +1 moreksmbd: fix use-after-free in kerberos authentication9.8 Critical
- linux, linux kernel +1 morepds_core: remove write-after-free of client_id7.8 High
- debian linux, linux kernel +1 moredrm/amd/display: Fix slab-use-after-free in hdcp7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in session logoff8.8 High
- imagination technologies graphics ddkGPU DDK - Improper locking when accessing the pvr_exp_fence object7.5 High
- debian linux, linux kernel +1 morenet_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc7.8 High
- python software foundation cpythonUse-after-free in "unicode_escape" decoder with error handler5.9 Medium
- linux, linux kernel +1 morerpmsg: char: Avoid double destroy of default endpoint7.8 High
- linux, linux kernel +1 morecoresight: Clear the connection field properly7.8 High
- intel proset\/wireless wifiUse after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100...7.0 High
- intel proset\/wireless wifiUse after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100...7.2 High
- intel proset\/wireless wifiUse after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100...8.3 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreUniversal Print Management Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2012 +13 more +15 moreWindows Remote Desktop Services Remote Code Execution Vulnerability7.5 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft office, 365 apps, excel +10 more +12 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- linux, linux kernel +1 moreBluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition7.8 High
- debian linux, linux kernel +1 moreKVM: x86: Reset IRTE to host control if *new* route isn't postable8.8 High
- Show moreLoading…