CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: hci_event: fix potential UAF in SSP passkey handlers8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: ns: Fix use-after-free in driver remove()7.8 High
- linux, linux kernel +1 morevfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex7.8 High
- linux, linux kernel +1 moremedia: mtk-jpeg: fix use-after-free in release path due to uncancelled work7.8 High
- linux, linux kernel +1 moreALSA: caiaq: Handle probe errors properly7.8 High
- linux, linux kernel +1 morespi: imx: fix use-after-free on unbind7.8 High
- linux, linux kernel +1 moreio_uring/zcrx: fix user_struct uaf7.8 High
- linux, linux kernel +1 moreof: unittest: fix use-after-free in testdrv_probe()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moregfs2: Fix use-after-free in iomap inline data write path7.8 High
- linux, linux kernel +1 moreaccel/amdxdna: Stop job scheduling across aie2_release_resource()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresmb: client: fix potential UAF and double free in smb2_open_file()9.8 Critical
- linux, linux kernel +1 morebonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 High
- linux, linux kernel +1 moredrm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()7.8 High
- linux, linux kernel +1 morebpf: Fix a potential use-after-free of BTF object7.8 High
- linux, linux kernel +1 morepower: supply: ab8500: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: pm8916_lbc: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: goldfish: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 moreovpn: fix possible use-after-free in ovpn_net_xmit7.8 High
- linux, linux kernel +1 morepower: supply: sbs-battery: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 moreRevert "hwmon: (ibmpex) fix use-after-free in high/low store"7.8 High
- linux, linux kernel +1 morepower: supply: pf1550: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: bq256xx: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: cpcap-battery: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: bq25980: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 morepower: supply: act8945a: Fix use-after-free in power_supply_changed()7.8 High
- linux, linux kernel +1 moreserial: caif: fix use-after-free in caif_serial ldisc_close()7.8 High
- linux, linux kernel +1 moregfs2: Fix slab-use-after-free in qd_put7.8 High
oneringbufcrates.ioOneRingBuf has a Use After Free Vulnerability6.3 Medium- linux, linux kernel +1 morebpf: Fix use-after-free in arena_vm_close on fork7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morerxrpc: Fix potential UAF after skb_unshare() failure7.8 High
- nvidia virtual gpu managerNVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could...7.0 High
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use...8.8 High
- cesnet libyanglibyang - Heap Use-After-Free Write in XML Metadata Parsing6.9 Medium
- f5 nginx open source, nginx gateway fabric, nginx ingress controller +6 more +8 moreNGINX Open-Source ngx_http_v3_module vulnerability9.2 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()7.8 High
- linux, linux kernel +1 morefbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free7.3 High
- freebsdKernel use-after-free via file descriptor syscalls7.8 High
- google chromeUse after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to...8.8 High
- google chromeUse after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote...8.8 High
- google chromeUse after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to...8.8 High
- google chromeUse after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote...8.8 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreSIG(0) validation during query flood may lead to undefined behavior7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreHeap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation7.4 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 morePossible arbitrary code execution during DNSSEC validation9.1 Critical
- samsung escargotUse after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This...7.8 High
- openharmonyfilemanagement_storage_service has an use after free vulnerability6.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs component9.6 Critical
- Show moreLoading…