CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- bytecodealliance wasmtimeWasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call6.9 Medium
- apache http serverApache HTTP Server: mod_auth_digest DoS attack7.3 High
- apache http serverApache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy9.8 Critical
- apache http serverApache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}9.8 Critical
- tnef project tnefTnef: use-after-free and double-free in get_body_files() via multi-value body extraction6.5 Medium
- google androidIn BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to...9.8 Critical
- es iperf3iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's...9.2 Critical
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreUse-after-free of a server-side SSLContext when sni_callback switches contexts9.2 Critical
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module...6.4 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module...7.0 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreThe NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- denx software engineering u-bootU-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback8.8 High
- google chromeUse after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote...8.3 High
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeUse after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- eclipse foundation netx duoWhen NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session...8.3 High
- pypyPyPy pyexpat ExternalEntityParserCreate Use-After-Free6.3 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Audio/Video component7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Preferences: Backend component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: WebGPU component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: UI Events & Focus Handling component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Widget: Gtk component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the CSS Parsing and Computation component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Core & HTML component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs component9.6 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XSLT component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Text and Fonts component8.8 High
- Show moreLoading…