CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morebinder: fix UAF in binder_netlink_report()7.8 High
- linux, linux kernel +1 morebonding: fix use-after-free due to enslave fail after slave array update7.8 High
- linux, linux kernel +1 moregpio: virtuser: fix UAF in configfs release path7.8 High
- linux, linux kernel +1 morewifi: ath10k: fix dma_free_coherent() pointer5.5 Medium
- google chrome, chromium +1 moreUse after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to...8.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...6.5 Medium
- google chromeUse after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who...8.8 High
- google chromeUse after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to...8.8 High
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreA use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated...4.6 Medium
- adobe after effectsAfter Effects | Use After Free (CWE-416)7.8 High
- adobe after effectsAfter Effects | Use After Free (CWE-416)7.8 High
- adobe after effectsAfter Effects | Use After Free (CWE-416)7.8 High
- adobe after effectsAfter Effects | Use After Free (CWE-416)7.8 High
- adobe after effectsAfter Effects | Use After Free (CWE-416)7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h3 +14 more +16 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h3, windows 11 version 23h2, windows 11 version 24h2 +10 more +12 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreCluster Client Failover (CCF) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMailslot File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Graphics Component Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h3 +14 more +16 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.0 High
- ckolivas lrzipckolivas lrzip stream.c lzma_decompress_buf use after free4.8 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the frequency modulation module. Impact: Successful...5.5 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability...6.5 Medium
- huawei harmonyosUAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this...8.4 High
- huawei harmonyosType confusion vulnerability in the camera module. Impact: Successful exploitation of this...4.0 Medium
- mrubymruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free4.8 Medium
- espressif esp-idfESF-IDF Has Use-after-free Vulnerability in BLE Provisioning6.3 Medium
- linux, linux kernel +1 moreALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()7.8 High
- linux, linux kernel +1 moremm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenet/sched: Enforce that teql can only be used as root qdisc7.8 High
- freerdpFreeRDP has a Heap-use-after-free in play_thread8.7 High
- freerdpFreeRDP has a heap-use-after-free in ainput_send_input_event8.7 High
- freerdpFreeRDP has a heap-use-after-free in urb_bulk_transfer_cb8.7 High
- freerdpFreeRDP has a heap-use-after-free in update_pointer_new(SDL)8.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreFreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread8.7 High
- freerdpFreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h2648.7 High
- freerdpFreeRDP has a heap-use-after-free in audio_format_compatible7.7 High
- freerdpFreeRDP has a Heap-use-after-free in urb_select_interface7.7 High
- freerdpFreeRDP has a heap-use-after-free in video_timer7.7 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +151 more +153 moreUse After Free in Graphics7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +35 more +37 moreUse After Free in Secure Processor7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +19 more +21 moreUse After Free in Secure Processor7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn imgsys, there is a possible escalation of privilege due to use after free. This could lead to...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn cameraisp, there is a possible escalation of privilege due to use after free. This could lead...7.8 High
- monkey-project monkeyA use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit...7.5 High
- monkey-project monkeyA use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit...7.5 High
- nvidia virtual gpu manager, geforce, rtx pro, rtx, quadro +1 more +3 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest...7.8 High
- nvidia geforce, rtx pro, rtx, quadro, tesla +2 moreNVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use...7.8 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the Layout: Scrolling and Overflow component8.8 High
- Show moreLoading…