CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Clipboard Server Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - DevmemIntGetReservationData does not ref the PMR it returns7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF8.8 High
- linux, linux kernel +1 moredrm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl()7.8 High
- linux, linux kernel +1 moreteam: fix check for port enabled in team_queue_override_port_prio_changed()7.8 High
- linux, linux kernel +1 moreiommu: disable SVA when CONFIG_X86 is set7.8 High
- linux, linux kernel +1 moreBluetooth: btusb: revert use of devm_kzalloc in btusb7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: aic94xx: fix use-after-free in device removal path7.8 High
- linux, linux kernel +1 moreInput: lkkbd - disable pending work before freeing device7.8 High
- linux, linux kernel +1 moreiommu/mediatek: fix use-after-free on probe deferral7.8 High
- linuxInput: alps - fix use-after-free bugs caused by dev3_register_work7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency9.8 Critical
- linuxnet/sched: ets: Remove drr class from the active list if it changes to strict7.8 High
- linuxmlxsw: spectrum_router: Fix neighbour use-after-free7.8 High
- linuxmlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats7.8 High
- linuxdrm/amdgpu: fix a job->pasid access race in gpu recovery7.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC component8.8 High
- espressif esp-usb, usb host hid driver +1 moreEspressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability6.8 Medium
- samsung android, samsung mobile devices +1 moreUse After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to...7.3 High
- samsung android, samsung mobile devices +1 moreUse after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to...6.7 Medium
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +183 more +185 moreUse After Free in HLOS7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +62 more +64 moreUse After Free in Camera Driver6.7 Medium
- qualcomm fastconnect 7800 firmware, qmp1000 firmware, sm8735 firmware +16 more +18 moreUse After Free in Camera Driver6.7 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOS6.6 Medium
- color iccdevUse After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEV7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn dpe, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn dpe, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn dpe, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible use after free due to a race condition. This could lead to local...7.0 High
- google android, mediatek, inc. mediatek chipset +1 moreIn geniezone, there is a possible memory corruption due to use after free. This could lead to...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn c2ps, there is a possible memory corruption due to use after free. This could lead to local...7.8 High
- color iccdeviccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion9.8 Critical
- apache nuttx, apache software foundation nuttx rtos +1 moreApache NuttX RTOS: fs/vfs/fs_rename: use after free8.1 High
- emqx nanomqNanoMQ has Use-After-Free of malformed bridging message6.9 Medium
- fontforgeFontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability8.8 High
- fontforgeFontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability8.8 High
- linux, linux kernel +1 moreHID: uclogic: Correct devm device reference for hidinput input_dev name7.8 High
- emqx nanomqNanoMQ has a Use After Free vulnerability via sub info list7.5 High
- fluidsynthUse after free in fluidsynth7.0 High
- gimpGIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- Show moreLoading…