CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: use-after-free of jscvalue function parameters8.8 High
- amazon freertos, freertos freertos-kernel +1 moreMissing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel8.3 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS...4.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- google chromeUse after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...8.8 High
- google chromeUse after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...8.8 High
- torproject torTor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object...5.9 Medium
kcl-libcrates.io,zoo-kclPyPI +1 moreZoo Design Studio: Memory-corruption in memory handling of lib-kcl6.9 Medium- libeventLibevent: Null Pointer Dereference in `evws_new_session`5.7 Medium
- gstreamerGStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability7.8 High
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a...4.9 Medium
- wiresharkUse After Free in Wireshark5.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.4 High
- freebsdUse-after-free in kqueue copy-on-fork8.4 High
- freebsdUse-after-free in TCP RACK stack option handler8.4 High
- freebsdUse-after-free in device pager page list8.8 High
- google chromeUse after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...8.8 High
- google chromeUse after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote...8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics component4.2 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Layout: Text and Fonts component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component9.8 Critical
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and...5.4 Medium
- apple ipados, macos, safari +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and...4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.5 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...6.5 Medium
- huawei harmonyosUAF vulnerability in the time and time zone module. Impact: Successful exploitation of this...3.3 Low
- linuxscsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 Critical
- linuxscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Critical
- linuxfs/resctrl: Fix use-after-free during unmount7.8 High
- linuxnet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 High
- linuxlocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Critical
- zephyrproject zephyrUse-after-free freeing an armed dynamically-allocated k_timer in Zephyr userspace object disposal8.8 High
- zephyrproject zephyrUse-after-free in Zephyr delayable work-queue cancellation under SMP timing race5.8 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access3.1 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreBinutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing5.5 Medium
- linuxbtrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps7.8 High
- google chromeUse after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...8.8 High
- google chromeUse after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who...7.5 High
- google chromeUse after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote...8.3 High
- google chromeUse after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...8.8 High
- openbsd opensshIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...4.8 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Geospatial Validation Leads to Denial of Service6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution7.7 High
- Show moreLoading…