CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, pandeiro firmware +28 more +30 moreUse After Free in Camera Driver6.5 Medium
- linux, linux kernel +1 moreBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold8.8 High
- electronElectron has a use-after-free in offscreen shared texture release() callback2.3 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreNFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd7.8 High
- linux, linux kernel +1 morenvdimm/bus: Fix potential use after free in asynchronous initialization7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: fix use-after-free access to PTP clock7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: fix use-after-free on controller registration failure7.8 High
- linux, linux kernel +1 moreBluetooth: HIDP: Fix possible UAF8.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown7.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()9.8 Critical
- linux, linux kernel +1 moreigc: fix page fault in XDP TX timestamps handling7.8 High
- linux, linux kernel +1 moremshv: Fix use-after-free in mshv_map_user_memory error path7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free of share_conf in compound request9.8 Critical
- linux, linux kernel +1 moreksmbd: fix use-after-free in durable v2 replay of active file handles9.8 Critical
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 moreElectron: Use-after-free in offscreen child window paint callback8.1 High
- electronElectron: Use-after-free in download save dialog callback5.8 Medium
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 moreElectron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks7.5 High
- electronElectron: Use-after-free in PowerMonitor on Windows and macOS7.0 High
- linux, linux kernel +1 morefutex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()7.8 High
- linux, linux kernel +1 moreclsact: Fix use-after-free in init/destroy rollback asymmetry7.8 High
- linux, linux kernel +1 morenetfilter: bpf: defer hook memory release until rcu readers are done7.8 High
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moreKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE5.5 Medium
- google chromeUse after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker...9.6 Critical
- google chromeUse after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote...9.6 Critical
- google chromeUse after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...8.8 High
- google chromeUse after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...6.3 Medium
- google chromeUse after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had...7.5 High
- google chrome, dawn +1 moreUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had...8.8 High
- google chromeUse after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...8.8 High
- google chromeUse after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote...8.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreUse after free of view cache in Foxit PDF Editor/Reader5.5 Medium
- powerdns dnsdistUse after free when parsing EDNS options in Lua4.8 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- softing smartlink hw-dp, smartlink hw-pn +1 moreMultiple implicit reads in parallel can result in a crash or denial of service6.5 Medium
- libpngLIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`7.5 High
- linuxfoundation everest, everest everest-core +1 moreEVerest: ISO15118 session_setup use-after-free can crash EVSE process5.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has use-after-free in auth timeout timer via race condition5.3 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free4.2 Medium
- squid-cache squid, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreSquid vulnerable to Denial of Service in ICP Request handling9.2 Critical
- squid-cache squid, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreSquid has Denial of Service in ICP Response handling8.7 High
- cryptodev-linuxcryptodev-linux <= 1.14 get_userbuf Use After Free LPE8.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nf_tables: release flowtable after rcu grace period on error7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_CT: drop pending enqueued packets on template removal7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nft_set_pipapo: split gc into unlink and reclaim phase7.8 High
- Show moreLoading…