CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.1 High
- google chromeUse after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...9.6 Critical
- google chromeUse after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...8.1 High
- google chromeUse after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...8.8 High
- google chromeUse after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...10.0 Critical
- google chromeUse after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...8.1 High
- google chromeUse after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...7.8 High
- google chromeUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...9.8 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who...8.1 High
- zephyrproject zephyrUse-after-free race in SNTP async client when closing the socket while the socket service is still polling it6.5 Medium
- opengauss-server opengauss-server-7.0.0-rc1, opengauss-server-7.0.0-rc2, opengauss-server-7.0.0-rc3 +2 moreopenGauss存在非法内存访问导致DoS漏洞5.9 Medium
- apple ipados, macos, safari +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +2 more +4 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...5.3 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probing6.8 Medium
- zephyrproject zephyrUse-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation7.4 High
- freebsdUse-after-free bug in the IPV6_MSFILTER socket option handler7.8 High
- freebsdMultiple vulnerabilities in the sound(4) mmap path7.0 High
- linux, linux kernel +1 morenet: enetc: fix NTMP DMA use-after-free issue7.8 High
- linux, linux kernel +1 moremailbox: mailbox-test: free channels on probe error7.8 High
- linux, linux kernel +1 moredrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 High
- envoyproxy envoyEnvoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)5.9 Medium
- envoyproxy envoyEnvoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides5.9 Medium
- envoyproxy envoyEnvoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message6.5 Medium
- google chromeUse after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote...7.5 High
- google chromeUse after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local...6.8 Medium
- wolfsslUse-after-free in PQC hybrid key-share handling2.3 Low
- azeotech daqfactoryUse after free in AzeoTech DAQFactory8.4 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix a use-after-free of the hci_conn pointer7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: mcast: Fix use-after-free when processing MLD queries8.8 High
- linux, linux kernel +1 moretee: optee: prevent use-after-free when the client exits before the supplicant7.8 High
- linux, linux kernel +1 moreerofs: fix use-after-free on sbi->sync_decompress7.8 High
- Show moreLoading…