CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a remote attacker...8.8 High
- google chromeUse after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who...8.8 High
- google chromeUse after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to...8.8 High
- google chromeUse after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to...8.8 High
- curluse after free in SMB connection reuse7.5 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- envoyproxy envoyEnvoy global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly5.3 Medium
- envoyproxy envoyEnvoy HTTP: filter chain execution on reset streams causing UAF crash5.9 Medium
- color iccdevHeap-use-after-free in CIccCmm::AddXform()7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 copilot, office for android +1 moreMicrosoft Office Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h3 +15 more +17 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +6 more +8 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Authentication Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h3, windows 11 version 23h2, windows 11 version 24h2 +11 more +13 moreWindows Hyper-V Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Device Association Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft 365 copilot, office for android, windows 10 version 1607 +27 more +29 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreRPC Runtime Library Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +12 more +14 moreBroadcast DVR Elevation of Privilege Vulnerability7.0 High
- mozilla firefoxMemory safety bugs fixed in Firefox 148.0.28.8 High
- imagemagickImageMagick has a heap use-after-free in the MSL encoder4.0 Medium
- imagemagickImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder5.3 Medium
- pjsip, pjsip pjproject +1 morePJSIP: Heap use-after-free in PJSIP presence subscription termination handler8.7 High
- canonical ubuntu linuxUse-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel7.1 High
- emqx nanomqNanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash5.3 Medium
- linux, linux kernel +1 moref2fs: fix to avoid UAF in f2fs_write_end_io()7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +6 more +8 morenetfilter: nf_tables: fix use-after-free in nf_tables_addchain()7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive Audio7.8 High
- qualcomm lemans au lgit firmware, lemansau firmware, qam8255p firmware +23 more +25 moreUse After Free in Automotive Audio7.8 High
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive Audio7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +120 more +122 moreUse After Free in Automotive Audio7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive Audio7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 moreUse After Free in Automotive Audio7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible system crash due to use after free. This could lead to local...4.4 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn imgsys, there is a possible system crash due to use after free. This could lead to local...4.4 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn MAE, there is a possible system crash due to use after free. This could lead to local denial...4.4 Medium
- google androidIn VPU, there is a possible use-after-free read due to a race condition. This could lead to local...2.9 Low
- google androidIn vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This...7.4 High
- google androidIn smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after...6.7 Medium
hivexcrates.ioHive has Double-free and Use After Free VulnerabilitiesNo score- Show moreLoading…