CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...8.3 High
- google chromeUse after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.8 High
- google chromeUse after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced...7.5 High
- google chromeUse after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...8.3 High
- google chromeUse after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...8.3 High
- google chromeUse after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.3 High
- google chromeUse after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a...8.8 High
- google chromeUse after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote...7.5 High
- google chromeUse after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeUse after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local...7.8 High
- google chromeUse after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.3 High
- google chromeUse after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...8.3 High
- google chromeUse after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote...8.3 High
- google chromeUse after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote...8.3 High
- google chromeUse after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...9.6 Critical
- google chromeUse after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeUse after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker...7.5 High
- linux, linux kernel +1 moredrm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v47.8 High
- linux, linux kernel +1 moredrm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release7.8 High
- linux, linux kernel +1 morenet: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets8.8 High
- linux, linux kernel +1 moreatm: fore200e: fix use-after-free in tasklets during device removal7.5 High
- linux, linux kernel +1 morexfs: remove xfs_attr_leaf_hasname7.8 High
- linux, linux kernel +1 morereset: gpio: suppress bind attributes in sysfs7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: roccat: fix use-after-free in roccat_report_event7.8 High
- linux, linux kernel +1 morexfrm: Wait for RCU readers during policy netns exit7.8 High
- linux, linux kernel +1 morenetfilter: nfnetlink_queue: make hash table per queue7.8 High
- linux, linux kernel +1 moreocfs2: validate inline data i_size during inode read7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreeventpoll: defer struct eventpoll free to RCU grace period7.8 High
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreredis-server Lua use-after-free may allow remote code execution6.1 Medium
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreredis-server use-after-free in unblock client flow may allow remote code execution7.7 High
- linux, linux kernel +1 morexfs: don't irele after failing to iget in xfs_attri_recover_work7.8 High
- linux, linux kernel +1 morenetfilter: nft_ct: drop pending enqueued packets on removal7.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: Fix list corruption and UAF in command complete handlers7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +174 more +176 moreUse After Free in Automotive GPU7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable8.1 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs8.1 High
- linux, linux kernel +1 morenet: mana: fix use-after-free in add_adev() error path7.8 High
- linux, linux kernel +1 moreatm: lec: fix use-after-free in sock_def_readable()7.0 High
- linux, linux kernel +1 moreHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure7.8 High
- Show moreLoading…