CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- apache traffic serverApache Traffic Server: Use-after-free in the intercept plugin8.2 High
- apache traffic serverApache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free8.3 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()8.8 High
- enterprisedb pglogicalA use-after-free condition exists in pglogical's worker signaling code, where a worker structure...7.7 High
- sparklemotion sqlite3-rubysqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks2.0 Low
- sparklemotion sqlite3-rubysqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity2.0 Low
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...9.8 Critical
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- linux, linux kernel +1 morenetfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()8.8 High
- linux, linux kernel +1 moretipc: fix use-after-free of the discoverer in tipc_disc_rcv()7.8 High
- linux, linux kernel +1 morenet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 Critical
- linux, linux kernel +1 morenet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle9.8 Critical
- valkey-io valkeyValkey: UAF in stream deserialization may lead to remote code execution8.8 High
- valkey-io valkeyValkey: TLS pending-data processing use-after-free may allow remote code execution7.5 High
- linux, linux kernel +1 morenet/handshake: Take a long-lived file reference at submit9.8 Critical
- linux, linux kernel +1 moreACPI: NFIT: core: Fix acpi_nfit_init() error cleanup7.0 High
- linux, linux kernel +1 moreALSA: hda/cs35l41: Fix firmware load work teardown7.8 High
- linux, linux kernel +1 morevfio/pci: Release the VGA arbiter client on register_device() failure8.8 High
- linux, linux kernel +1 moreBluetooth: btusb: fix use-after-free on registration failure7.8 High
- linux, linux kernel +1 moreBluetooth: btusb: fix use-after-free on marvell probe failure7.8 High
- linux, linux kernel +1 morebinder: fix UAF in binder_thread_release()7.8 High
- linux, linux kernel +1 morebinder: fix UAF in binder_free_transaction()7.8 High
- linux, linux kernel +1 moreUSB: chaoskey: Fix slab-use-after-free in chaoskey_release()7.8 High
- linux, linux kernel +1 moreusb: misc: usbio: fix disconnect UAF in client teardown7.8 High
- linux, linux kernel +1 more6lowpan: fix NHC entry use-after-free on error path7.1 High
- linux, linux kernel +1 morecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()8.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL8.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref8.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete7.8 High
- linux, linux kernel +1 morenetpoll: fix a use-after-free on shutdown path7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: igmp: remove multicast group from hash table on device destruction7.8 High
- linux, linux kernel +1 moremedia: nxp: imx8-isi: Fix use-after-free on remove7.8 High
- linux, linux kernel +1 moremfd: cros_ec: Delay dev_set_drvdata() until probe success7.0 High
- linux, linux kernel +1 moreBluetooth: bnep: pin L2CAP connection during netdev registration8.8 High
- linux, linux kernel +1 moreBluetooth: fix UAF in bt_accept_dequeue()8.0 High
- linux, linux kernel +1 moresmb: client: resolve SWN tcon from live registrations7.8 High
- linux, linux kernel +1 moreksmbd: serialize QUERY_DIRECTORY requests per file9.8 Critical
- linux, linux kernel +1 moreksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation8.8 High
- linux, linux kernel +1 morecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 High
- Show moreLoading…