CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: use of uninitialized variable in privatekey_from_file()3.6 Low
- google chromeUse after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to...5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in FontFaceSet9.8 Critical
- webassembly wabtWebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free4.8 Medium
- jqlang jqjq heap use after free vulnerability in f_strflocaltime5.5 Medium
- linux, linux kernel +1 moreusbnet: Fix linkwatch use-after-free on disconnect7.8 High
- linux, linux kernel +1 morespi: tegra20-slink: fix UAF in tegra_slink_remove()7.8 High
- linux, linux kernel +1 morebtrfs: unset reloc control if transaction commit fails in prepare_to_relocate()7.8 High
- linux, linux kernel +1 moreieee802154/adf7242: defer destroy_workqueue call8.0 High
- linux, linux kernel +1 morestaging: rtl8712: fix use after free bugs7.0 High
- linux, linux kernel +1 morebinder: fix UAF of ref->proc caused by race condition7.8 High
- linux, linux kernel +1 morealloc_tag: allocate percpu counters for module tags dynamically7.8 High
- linux, linux kernel +1 moreASoC: SOF: Intel: hda: Fix UAF when reloading module7.8 High
- debian linux, linux kernel +1 morenet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done8.8 High
- debian linux, linux kernel +1 moresmb: client: Fix use-after-free in cifs_fill_dirent7.8 High
- debian linux, linux kernel +1 moreRDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug7.8 High
- linux, linux kernel +1 moreRDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem7.8 High
- linux, linux kernel +1 moremlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices7.8 High
- google chromeUse after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to...8.8 High
- aio-libs aiodnspycares has a Use-After-Free Vulnerability8.2 High
- imagination technologies graphics ddk, imaginationtech ddk +1 morePossible kernel exceptions caused by reading and writing kernel heap data after free.5.7 Medium
- assimpOpen Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free4.8 Medium
- qtUse after free in QHttp2ProtocolHandler2.1 Low
- google chromeUse after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to...8.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- microsoft office, powerpoint, 365 apps +8 more +10 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +2 more +4 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +2 more +4 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)5.5 Medium
- debian linux, linux kernel +1 moresch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()7.8 High
- radare radare2Radare2 radiff2 cons.c r_cons_flush use after free2.0 Low
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free...6.5 Medium
- samsung exynos 1380 firmwareAn issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile...6.5 Medium
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +43 more +45 moreUse After Free in Graphics7.5 High
- Show moreLoading…