CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a...8.3 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.3 High
- google chromeUse after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...7.5 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeUse after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...9.0 Critical
- google chromeUse after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeUse after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeUse after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote...8.8 High
- google chromeUse after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker...9.0 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeUse after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- linux, linux kernel +1 morespi: mpc52xx: fix use-after-free on registration failure7.8 High
- linux, linux kernel +1 moremedia: iris: Fix use-after-free in iris_release_internal_buffers()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 High
- linux, linux kernel +1 morespi: mpc52xx: fix use-after-free on unbind7.8 High
- linux, linux kernel +1 moredrm: Set old handle to NULL before prime swap in change_handle7.8 High
- linux, linux kernel +1 moreHID: appletb-kbd: fix UAF in inactivity-timer cleanup path7.8 High
- linux, linux kernel +1 morebatman-adv: bla: prevent use-after-free when deleting claims8.8 High
- linux, linux kernel +1 moremedia: iris: fix use-after-free of fmt_src during MBPF check7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreexit: prevent preemption of oopsing TASK_DEAD task7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 morewifi: mac80211: use safe list iteration in radar detect work8.8 High
- linux, linux kernel +1 moresched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters7.0 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep fails8.8 High
- linux, linux kernel +1 moremm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreip6_gre: Use cached t->net in ip6erspan_changelink().7.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 High
- linux, linux kernel +1 moreBluetooth: hci_conn: fix potential UAF in create_big_sync7.8 High
- canonical ubuntu linuxUse-after-free in Ubuntu Linux AppArmor notification handling7.8 High
- oisf suricataSuricata detect/transform: use-after-free in decompress transforms5.9 Medium
- oisf suricataSuricata detect/transform: use-after-free in dotprefix transform5.9 Medium
- No product listedTeamSpeak 3 Server Connection State Management process_resend_queue use after free5.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels8.1 High
- linux, linux kernel +1 moreInput: edt-ft5x06 - fix use-after-free in debugfs teardown7.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stop7.8 High
- linux, linux kernel +1 moreRDMA/mana_ib: Disable RX steering on RSS QP destroy7.8 High
- linux, linux kernel +1 morecrypto: atmel-sha204a - Fix potential UAF and memory leak in remove path7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info7.8 High
- Show moreLoading…