CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...7.5 High
- google chromeUse after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker...8.8 High
- google chromeUse after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...7.5 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...8.3 High
- google chromeUse after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...9.6 Critical
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...8.8 High
- google chromeUse after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who...7.5 High
- google chromeUse after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...8.3 High
- google chromeUse after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...8.8 High
- google chromeUse after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...8.8 High
- google chromeUse after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to...6.8 Medium
- linux, linux kernel +1 morepmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()7.8 High
- linux, linux kernel +1 morespi: topcliff-pch: fix use-after-free on unbind7.8 High
- linux, linux kernel +1 moreof: unittest: fix use-after-free in of_unittest_changeset()8.4 High
- linux, linux kernel +1 moremtd: docg3: fix use-after-free in docg3_release()7.8 High
- linux, linux kernel +1 morelib: test_hmm: evict device pages on file close to avoid use-after-free7.8 High
- apache http serverApache HTTP Server: mod_http2 memory corruption when file handles exhausted7.3 High
- apache http serverApache HTTP Server: mod_ldap per-dir use-after-free9.8 Critical
- linux, linux kernel +1 moreio-wq: check that the predecessor is hashed in io_wq_remove_pending()7.8 High
dieselcrates.ioDiesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`6.9 Medium- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()7.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote...9.6 Critical
- google chromeUse after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...4.7 Medium
- google chromeUse after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote...8.1 High
- google chromeUse after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeUse after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who...8.8 High
- google chromeUse after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a...8.1 High
- google chromeUse after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.8 High
- google chromeUse after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote...9.6 Critical
- google chromeUse after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had...7.5 High
- google chromeObject lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...9.6 Critical
- google chromeUse after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeUse after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...9.6 Critical
- Show moreLoading…