CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreUse-after-free in the Internationalization component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Win32 component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Streams component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Navigation component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: HTML Parser component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Disability Access APIs component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: Web Codecs component5.3 Medium
gpacUbuntuGPAC base_scenegraph.c gf_node_get_name_and_id use after free5.3 MediumgpacUbuntuGPAC Compositor media_object.c gf_mo_get_od_id use after free6.9 Medium- luben zstd-jniluben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free6.9 Medium
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free4.8 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_unregister use after free4.8 Medium- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS...5.5 Medium
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate...5.5 Medium
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.5 Medium
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, visionos +2 more +4 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.5 Medium
- zephyrproject zephyrit82xx2 USB device controller submits incomplete OUT transfer buffers, causing use-after-free and event-list corruption6.8 Medium
- zephyrproject zephyrUse-after-free / double-free from unsynchronized concurrent access to the TLS client session cache in Zephyr sockets5.9 Medium
gpacUbuntuGPAC MP4Box vrml_tools.c gf_sg_script_load use after free5.3 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_get_name use after free5.3 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_unregister use after free5.3 Medium- No product listedOpen5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free6.9 Medium
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free5.3 Medium- samsung exynos 1280 firmwareAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400,...4.2 Medium
gpacUbuntuGPAC MP4Box list.c gf_list_count use after free4.8 Medium- microsoft edge, edge (chromium-based), edge chromium +5 more +7 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.5 High
- freebsd, netbsd netbsdNetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen7.3 High
- mongodb java driver, org.mongodb:mongodb-crypt maven package, org.mongodb:mongodb-driver-reactivestreams maven package +2 moreApplication denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver8.2 High
- cjson project cjsonDaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free6.9 Medium
- luben zstd-jnizstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()7.0 High
- luben zstd-jnizstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries7.0 High
- Show moreLoading…