CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- huawei harmonyosUAF vulnerability in the screen recording framework module. Impact: Successful exploitation of...8.4 High
- nanomqNanoMQ UAF of retain message due to invalid MQTTV5 properties6.0 Medium
- redboltz async mqttUse after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause...5.5 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-free7.8 High
hexchatcrates.iohexchat crate has a Use After Free vulnerability7.2 High- google chromeUse after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote...7.5 High
- mrubymruby array.c sort_cmp use after free4.8 Medium
- irai automgenIRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS6.9 Medium
- autodesk 3ds maxDWG File Parsing Use-After-Free Vulnerability7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe format pluginsFormat Plugins | Use After Free (CWE-416)5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +2 more +4 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreDirectX Graphics Kernel Denial of Service Vulnerability6.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +2 more +4 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 copilot, excel +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreMultimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability7.8 High
- adobe incopyInCopy | Use After Free (CWE-416)7.8 High
- adobe incopyInCopy | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video component8.8 High
- academysoftwarefoundation openexrOpenEXR has use after free in PyObject_StealAttrString5.5 Medium
- google android, mediatek, inc. mt2718, mt6989, mt6991, mt8370, mt8390, mt8395, mt8676, mt8678, mt87920 +1 moreIn apusys, there is a possible memory corruption due to use after free. This could lead to local...4.2 Medium
- google android, mediatek, inc. mt6899, mt6991, mt8793 +1 moreIn pda, there is a possible escalation of privilege due to use after free. This could lead to...4.2 Medium
- google android, mediatek, inc. mt2718, mt6761, mt6765, mt6768, mt6781, mt6853, mt6877, mt6886, mt6893, mt6897, mt6899, mt6983, mt6989, mt6991, mt8113, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8195, mt8196, mt8321, mt8365, mt8385, mt8390, mt8391, mt8512, mt8516, mt8519, mt8676, mt8678, mt8695, mt8696, mt8698, mt8755, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788e, mt8791t, mt8792, mt8793, mt8796, mt8797, mt8798, mt8873, mt8883, mt8893 +1 moreIn clkdbg, there is a possible escalation of privilege due to use after free. This could lead to...4.2 Medium
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +8 more +10 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...5.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- samsung exynos 1480 firmware, exynos 1580 firmware, exynos 2400 firmware +1 more +3 moreAn issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580,...6.5 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +3 more +5 moreAn issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280...9.8 Critical
- netsurf-browser netsurfNetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.6.5 Medium
- google androidIn bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due...8.0 High
- vtkKitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in...9.8 Critical
vtk9DebianKitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter...6.5 Medium- google chromeUse after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a...8.8 High
- google chromeUse after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who...7.5 High
usd-corePyPIOpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability6.9 Medium- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- wazuhWazuh Vulnerable to Heap Use After Free in w_copy_event_for_log6.3 Medium
- mozilla firefoxUse-after-free in WebGPU internals triggered from a compromised child process9.8 Critical
- Show moreLoading…