CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morevxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()7.8 High
- linux, linux kernel +1 morecachefiles: Fix potential UAF/KASAN warning7.8 High
- linux, linux kernel +1 moreALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF7.8 High
- linux, linux kernel +1 moreksmbd: fix listener task lifetime on netdev events7.8 High
- linux, linux kernel +1 morebtrfs: detach failed sprout device from transaction update list5.5 Medium
- linux, linux kernel +1 morebtrfs: restore active device pointers after failed sprout5.5 Medium
- linux, linux kernel +1 morebtrfs: fix transaction use-after-free in raid stripe insertion7.0 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.8 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibrsvg: use-after-free when xml includes have duplicated entities7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit Editor/Reader Array resetForm Use-After-Free Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreUse-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability7.8 High
- rti connext professionalUse After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.7.7 High
libnet-idn-encode-perlDebian,perl-Net-IDN-EncodeopenSUSE +1 moreNet::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode8.4 High- oisf suricataSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected...9.4 Critical
- eximExim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after...3.7 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.1 High
- imagemagickImageMagick before 7.1.2-31 Use After Free via ImagesToBlob2.1 Low
- google chromeUse after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to...8.8 High
- google chromeUse after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote...9.6 Critical
gpacUbuntuGPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free4.8 MediumgpacUbuntuGPAC BIFS commands.c gf_sg_command_del use after free4.8 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free4.8 Medium- isc bind 9Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path7.5 High
- isc bind 9qpcache NOQNAME proof use-after-free crashes recursive resolver5.9 Medium
- nlnet labs unboundUse-after-free in DoH stream cleanup code path5.9 Medium
- nlnet labs unboundUse-after-free in DoQ stream output buffer on reset re-transmission6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8 High
- google chromeUse after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- google chromeUse after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- google chromeUse after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...3.1 Low
- google chromeUse after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...8.8 High
- freerdpFreeRDP before 3.31.0 Use-After-Free via smartcard worker2.3 Low
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Gtk component8.8 High
- Show moreLoading…