CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Form Control Use-After-Free Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Field Use-After-Free Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Form Field Use-After-Free Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit Editor/Reader List Box Format Use-After-Free Vulnerability7.8 High
- openbsd opensshssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...7.7 High
- the xorg project xorg-x11-server, x.org x server, xwayland +2 morexorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()9.0 Critical
- labcenter proteusUse After Free in Labcenter Proteus8.4 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +46 more +48 moreUse After Free in Computer Vision6.6 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +46 more +48 moreUse After Free in Computer Vision6.6 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +58 more +60 moreUse After Free in Computer Vision6.6 Medium
- radare radare2radareorg radare2 cfile.c r_core_bin_load use after free4.8 Medium
- radare radare2radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free4.8 Medium
- linux, linux kernel +1 moreKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- openvpnAn incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote...6.0 Medium
- openvpn, debian linux +1 moreA use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote...6.0 Medium
- watchguard fireware, fireware os +1 moreWatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication9.2 Critical
- linux, linux kernel +1 moreBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 High
- google chromeUse after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who...7.5 High
- google chromeUse after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- imagemagickImageMagick: Use-After-Free in crafted 8BIM when identifying an image5.5 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a...5.9 Medium
- linux, linux kernel +1 morefhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()7.8 High
- google chromeUse after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...9.8 Critical
- google chromeUse after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeUse after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker who...8.1 High
- google chromeUse after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeUse after free in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- Show moreLoading…