CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- jasper project jasperJasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free4.8 Medium
- openatom openharmonyliteos_a has an UAF vulnerability8.4 High
- openatom openharmonyliteos_a has an UAF vulnerability8.4 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak7.5 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +43 more +45 moreUse After Free in BTHOST7.8 High
- qualcomm fastconnect 6900 firmware, qam8255p firmware, qam8650p firmware +22 more +24 moreUse After Free in NPU7.8 High
- qualcomm ar8035 firmware, c-v2x 9150 firmware, fastconnect 6900 firmware +62 more +64 moreUse After Free in NPU7.8 High
- huawei harmonyosVulnerability of returning released pointers in the distributed notification service. Impact:...5.9 Medium
- huawei harmonyosPointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this...4.4 Medium
- google chromeUse after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to...8.8 High
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local...7.0 High
- arm 5th gen gpu architecture userspace driver, bifrost gpu userspace driver, valhall gpu userspace driver +2 moreMali GPU Userspace Driver allows access to already freed memory4.3 Medium
- google chromeUse after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker...8.8 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos +1 moreA use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in...9.8 Critical
- autodesk shared componentsPRT File Parsing Use-After-Free Vulnerability7.8 High
- debian linux, linux kernel +1 moresmb: client: fix use-after-free in crypt_message when using async crypto9.8 Critical
- debian linux, linux kernel +1 moreiio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush7.8 High
- debian linux, linux kernel +1 morerpl: Fix use-after-free in rpl_do_srh_inline().9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moretls: always refresh the queue when reading sock9.8 Critical
- libtiffLibTIFF tiffmedian.c get_histogram use after free4.8 Medium
- debian linux, linux kernel +1 moretipc: Fix use-after-free in tipc_conn_close().7.8 High
- linux, linux kernel +1 moredrm/gem: Acquire references on GEM handles for framebuffers7.8 High
- debian linux, linux kernel +1 morenbd: fix uaf in nbd_genl_connect() error path7.8 High
- debian linux, linux kernel +1 moreksmbd: fix potential use-after-free in oplock/lease break ack8.8 High
- debian linux, linux kernel +1 moreACPICA: Refuse to evaluate a method if arguments are missing7.8 High
- linux, linux kernel +1 moreHID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe7.8 High
- debian linux, linux kernel +1 morerose: fix dangling neighbour pointers in rose_rt_device_down()8.8 High
- linux, linux kernel +1 moredmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using7.8 High
- arm mbed tls, mbed mbedtls +1 moreMbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are...8.9 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +18 more +20 morenet/sched: Always pass notifications when child class becomes empty7.8 High
- linux, linux kernel +1 moreeventpoll: don't decrement ep refcount while still holding the ep mutex7.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to...8.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- ibm mq, mq appliance +1 moreIBM MQ denial of service6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash8.7 High
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr7.8 High
- debian linux, linux kernel +1 moreftrace: Fix UAF when lookup kallsym after ftrace disabled7.8 High
- debian linux, linux kernel +1 morenet: atm: add lec_mutex7.8 High
- linux, linux kernel +1 morescsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk7.8 High
- debian linux, linux kernel +1 moreASoC: codecs: wcd9335: Fix missing free of regulator supplies7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: hci_core: Fix use-after-free in vhci_flush()7.8 High
- linux, linux kernel +1 morebridge: mcast: Fix use-after-free during router port configuration7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Notification Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Connected Devices Platform Service Remote Code Execution Vulnerability8.8 High
- Show moreLoading…