CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- ni labviewUse-after-Free in sentry!sentry_span_set_data() in NI LabVIEW8.5 High
- mozilla firefoxUse-after-free in the Disability Access APIs component9.8 Critical
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca0000 firmware +16 more +18 moreUse After Free in DSP Service7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +109 more +111 moreUse After Free in Automotive Linux OS7.8 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +109 more +111 moreUse After Free in Video7.8 High
- apple ipados, macos, safari +6 more +8 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +2 more +4 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- google chromeUse after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to...8.8 High
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...6.5 Medium
- ggml-org whisper.cppggml-org whisper.cpp common-whisper.cpp read_audio_data use after free4.8 Medium
- google chromeUse after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote...6.1 Medium
- azeotech daqfactoryUse After Free vulnerability in AzeoTech DAQFactory7.3 High
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...6.7 Medium
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A...6.7 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows File Explorer Elevation of Privilege Vulnerability7.3 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2022, 23h2 edition (server core installation) +5 more +7 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft office, word, 365 apps +11 more +13 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +11 more +13 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft office, word, 365 apps +11 more +13 moreMicrosoft Word Remote Code Execution Vulnerability7.0 High
- microsoft excel, office, 365 apps +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Outlook Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Remote Access Connection Manager Elevation of Privilege Vulnerability7.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: GMP component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling component9.8 Critical
- wasmi-labs wasmiWasmi's Linear Memory has a Critical Use After Free Vulnerability8.4 High
- c-aresc-ares has a Use After Free vulnerability when connection is cleaned up after error5.9 Medium
- huawei harmonyosRace condition vulnerability in the audio module. Impact: Successful exploitation of this...6.7 Medium
- imagemagickImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family4.9 Medium
- google chromeUse after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote...8.8 High
- google chromeUse after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker...8.8 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8186, mt8188, mt8196, mt8667, mt8673, mt8676, mt8678, mt8765, mt8766, mt8768, mt8771, mt8781, mt8791t, mt8792, mt8793, mt8795t, mt8796, mt8798, mt8873, mt8883 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8186, mt8188, mt8196, mt8667, mt8673, mt8676, mt8678, mt8765, mt8766, mt8768, mt8771, mt8781, mt8791t, mt8792, mt8793, mt8795t, mt8796, mt8798, mt8873, mt8883 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code5.9 Medium
- arm 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU processing operations4.0 Medium
- live555 streaming mediaA use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media...6.5 Medium
- live555 streaming mediaA use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming...6.5 Medium
- arm 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU memory processing operations5.1 Medium
- google androidIn bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use...7.4 High
- google androidIn bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free....6.7 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability...5.8 Medium
- huawei harmonyosUAF vulnerability in the screen recording framework module. Impact: Successful exploitation of...6.4 Medium
- Show moreLoading…