CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- freerdpFreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File5.5 Medium
- freerdpFreeRDP has heap-use-after-free in rail_window_free5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_clipboard_format_equal5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_cliprdr_provide_data_5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_rail_server_local_move_size5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)5.5 Medium
- freerdpFreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo5.5 Medium
- imagemagickImageMagick - Use-After-Free Write in PDB Decoder6.3 Medium
- imagemagickImageMagick - Heap Use-After-Free in Meta Coder6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC component9.8 Critical
- imagemagickImageMagick: Invalid MSL <map> can result in a use after free5.3 Medium
- imagemagickImageMagick has Use After Free in MSLStartElement in "coders/msl.c"5.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Window and Location component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC component9.8 Critical
ccextractorDebianCCExtractor mp4.c processmp4 use after free4.8 Medium- tanium cloud workloadsUse-after-free in Cloud Workloads4.7 Medium
- pjsip pjmedia-video, pjsip +1 morePJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL5.1 Medium
- fascinatedbox lilyFascinatedBox lily lily_symtab.c shorthash_for_name use after free4.8 Medium
- linux, linux kernel +1 moredrm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free7.8 High
- linux, linux kernel +1 moreksmbd: add chann_lock to protect ksmbd_chann_list xarray8.8 High
- linux, linux kernel +1 morebus: fsl-mc: fix use-after-free in driver_override_show()7.8 High
- chaiscriptChaiScript type_info.hpp bare_equal use after free2.0 Low
- chaiscriptChaiScript chaiscript_defines.hpp operator use after free2.0 Low
- linux, linux kernel +1 moreerofs: fix UAF issue for file-backed mounts w/ directio option7.8 High
- linux, linux kernel +1 morexfs: fix UAF in xchk_btree_check_block_owner7.8 High
- linux, linux kernel +1 morescsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()7.8 High
- apache arrowApache Arrow: Potential use-after-free when reading IPC file with pre-buffering7.0 High
- linux, linux kernel +1 moremacvlan: fix error recovery in macvlan_common_newlink()7.8 High
- linux, linux kernel +1 morespi: tegra210-quad: Protect curr_xfer check in IRQ handler4.7 Medium
- linux, linux kernel +1 moreKVM: Don't clobber irqfd routing type when deassigning irqfd7.8 High
- linux, linux kernel +1 morecgroup/dmem: avoid pool UAF7.0 High
- linux, linux kernel +1 morescsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()8.8 High
- linux, linux kernel +1 morelinkwatch: use __dev_put() in callers to prevent UAF7.8 High
- linux, linux kernel +1 moreALSA: aloop: Fix racy access at PCM trigger7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewifi: iwlwifi: mld: cancel mlo_scan_start_wk7.8 High
- Show moreLoading…