CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- ruby jsonRuby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams8.7 High
- google chromeUse after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had...7.5 High
- google chromeUse after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who...7.5 High
- google chromeUse after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...8.3 High
- google chromeUse after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...7.5 High
- google chromeUse after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...7.5 High
- google chromeUse after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...8.3 High
- google chromeUse after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...8.3 High
- google chromeUse after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...7.5 High
- google chromeUse after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...8.3 High
- google chromeUse after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...8.3 High
- google chromeUse after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...8.3 High
- google chromeUse after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...8.3 High
- mz automation libiec61850MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free4.8 Medium
- autodesk revit, autocad, autocad lt +1 more +3 morePDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products7.8 High
- ggml llama.cppllama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints9.2 Critical
- ggml llama.cppllama.cpp b7492–b9060 Use-After-Free RCE via llama-server9.2 Critical
- linuxwifi: brcmfmac: drain bus_reset work on device removal8.8 High
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 moreLibkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path7.3 High
- linuxRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 High
- linuxbpf: tcp: fix double sock release on batch realloc7.8 High
- linuxwifi: mac80211: tear down new links on vif update error path7.8 High
open62541DebianIn open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path....7.5 High- o6 open62541o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free4.8 Medium
- zephyrproject zephyrUse-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer7.1 High
- linux, linux kernel +1 moresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 Critical
- linux, linux kernel +1 morerhashtable: clear stale iter->p on table restart7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Excel Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- aio-libs aiohttpAIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)7.1 High
- mediatek mt6991 firmware, mt6993 firmware, mt8126 firmware +15 more +17 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.0 Medium
- freerdpFreeRDP before 3.29.0 Use-After-Free via async message proxy8.7 High
- freerdpFreeRDP before 3.29.0 Use-After-Free via WindowIcon async message8.7 High
- linux, linux kernel +1 moreKVM: nVMX: Hide shadow VMCS right after VMCLEAR8.8 High
- nodejs nodeA flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly...7.5 High
- google androidIn multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free....9.8 Critical
- zephyrproject zephyrUse-after-free of GATT subscribe params in Bluetooth host CCC-write response handler7.6 High
- o6 automation open62541o6 Automation open62541 Use After Free7.2 High
- msgpack messagepack, msgpack-ruby +1 moreMessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure2.1 Low
- google chromeUse after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...8.8 High
- Show moreLoading…