CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 High
- linux, linux kernel +1 moreBluetooth: hci_conn: fix potential UAF in set_cig_params_sync7.8 High
- linux, linux kernel +1 moreBluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt8.8 High
- linux, linux kernel +1 morebpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().7.8 High
- linux, linux kernel +1 morenet: macb: fix clk handling on PCI glue driver removal7.8 High
- linux, linux kernel +1 moregpib: fix use-after-free in IO ioctl handlers7.8 High
- linux, linux kernel +1 moreusb: usbtmc: Flush anchored URBs in usbtmc_release7.8 High
- linux, linux kernel +1 morethermal: core: Address thermal zone removal races with resume7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger9.8 Critical
- linux, linux kernel +1 moref2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewriteback: Fix use after free in inode_switch_wbs_work_fn()7.8 High
- linux, linux kernel +1 moref2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()7.8 High
- linux, linux kernel +1 morewifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free7.8 High
- wiresharkUse After Free in Wireshark5.5 Medium
- hmbrand text::csv xs, text\ +1 moreText::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption8.4 High
- google chromeUse after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local...7.5 High
- google chromeUse after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker...8.1 High
- google chromeUse after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who...8.3 High
- google chromeUse after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local...7.5 High
- google chromeUse after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote...8.3 High
- google chromeUse after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had...7.5 High
- google chromeUse after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who...8.8 High
- google chromeUse after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker...8.8 High
- google chromeUse after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a...8.8 High
- google chromeUse after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote...7.5 High
- google chromeUse after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a...8.8 High
- google chromeUse after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.17.3 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability5.5 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreUAF in Foxit PDF Editor/Reader via XFA calculate event5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: fix slab-use-after-free in __inet_lookup_established9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nft_ct: fix use-after-free in timeout object destroy7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morexfrm: hold dev ref until after transport_finish NF_HOOK7.8 High
- linux, linux kernel +1 morebatman-adv: hold claim backbone gateways by reference9.8 Critical
- linux, linux kernel +1 moremm/damon/stat: deallocate damon_call() failure leaking damon_ctx7.8 High
- linux, linux kernel +1 moremmc: vub300: fix use-after-free on disconnect7.8 High
- linux, linux kernel +1 morenet: lan966x: fix use-after-free and leak in lan966x_fdma_reload()7.8 High
- linux, linux kernel +1 moreocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY7.8 High
- Show moreLoading…