CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...8.3 High
- google chromeUse after free in Audio in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.3 High
- google chromeUse after free in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local...8.8 High
- google chromeUse after free in WebAppInstalls in Google Chrome on Android prior to 149.0.7827.53 allowed a...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker...8.3 High
- google chromeUse after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had...8.3 High
- google chromeUse after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.3 High
- google chromeUse after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote...7.5 High
- google chromeUse after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...7.5 High
- google chromeUse after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...7.5 High
- google chromeUse after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote...7.5 High
- google chromeUse after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote...8.3 High
- google chromeUse after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker...8.8 High
- google chromeUse after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local...8.8 High
- google chromeUse after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...8.1 High
- google chromeUse after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...8.3 High
- google chromeUse after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse,...4.9 Medium
- oalders html::entities, html\ +1 moreHTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities7.5 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has a Use-After-Free race in FF-A shared-memory teardown7.8 High
- linux, linux kernel +1 morepower: supply: rt9455: Fix use-after-free in power_supply_changed()8.4 High
- linux, linux kernel +1 morenfc: hci: shdlc: Stop timers and work before freeing context7.8 High
- linux, linux kernel +1 moredrm/xe/pf: Fix sysfs initialization8.8 High
- linux, linux kernel +1 moreprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 High
- linux, linux kernel +1 morepower: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler7.8 High
- eip stack group openerEIPStackGroup OpENer SendRRData cipmessagerouter.c CreateMessageRouterRequestStructure use after free5.3 Medium
- open asset import library assimpAssimp ASE File scene.cpp ~aiNode use after free4.8 Medium
- google androidIn lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to...7.8 High
- google androidIn edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of...7.8 High
- Show moreLoading…