CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- imagination technologies graphics ddkGPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference7.7 High
- imagination technologies graphics ddkGPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries7.7 High
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within...4.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()5.0 Medium
- eclipse 4diac forte, eclipse foundation 4diac +1 moreIn Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to...5.2 Medium
- google chromeUse after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...8.3 High
- google chromeUse after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who...8.3 High
- google chromeUse after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who...7.5 High
- google chromeUse after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...7.5 High
- google chromeUse after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote...8.8 High
- google chromeUse after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote...8.3 High
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local...7.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who...7.5 High
- google chromeUse after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote...8.8 High
- google chromeUse after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote...8.8 High
- google chromeUse after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote...8.8 High
- google chromeUse after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed...9.6 Critical
- google chromeUse after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote...8.8 High
- google chromeUse after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote...8.3 High
- zephyrproject zephyrUse-after-free reading `net_pkt` `iface` after send in IPv6 Neighbor Discovery (`ipv6_nbr.c`)4.2 Medium
- zephyrproject zephyrUse-after-free reading `net_pkt_iface()` of a sent ICMPv4 echo-reply packet in `icmpv4_handle_echo_request()`4.8 Medium
- zephyrproject zephyrUse-after-free in Zephyr ICMPv6 RX path when updating statistics after sending an echo reply or error5.9 Medium
- zephyrproject zephyrUse-after-free of `net_pkt` in IPv6 MLD send path triggerable by a link-local MLD Query5.9 Medium
- zephyrproject zephyrUse-after-free in Zephyr IPv4 IGMP send path (`igmp_send`)3.7 Low
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.125.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 1527.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 1527.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 1525.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP component8.8 High
- zephyrproject zephyrDangling memory-domain pointer (use-after-free) in Xtensa MMU page-table code on memory-domain de-init6.3 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreHeap use-after-free in ODF number-format blank-width parsing5.4 Medium
- zephyrproject zephyrUse-after-free in Zephyr native TCP `net_tcp_foreach()` due to dropping `tcp_lock` during the callback4.8 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and...4.3 Medium
- gpacA heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC...5.5 Medium
- gpacA heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC...5.5 Medium
- imagination technologies graphics ddkGPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink7.8 High
- @feathersjs mongodbPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion8.7 High
- google chromeUse after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...8.8 High
- google chromeUse after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...8.3 High
- google chromeUse after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...8.3 High
- google chromeUse after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker...8.3 High
- google chromeUse after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote...8.8 High
- google chromeUse after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who...5.3 Medium
- google chromeUse after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local...8.3 High
- google chromeUse after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a...8.1 High
- google chromeUse after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...8.3 High
- google chromeUse after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote...8.3 High
- google chromeUse after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...8.8 High
- imagemagickImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails5.9 Medium
- Show moreLoading…