CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a...8.8 High
- google chromeMemory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...9.6 Critical
- google chromeMemory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeMemory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- mozilla thunderbirdUse-after-free in S/MIME decryption during a security device password prompt5.4 Medium
- eclipse foundation threadxModule object deallocation can free a live ThreadX kernel object8.5 High
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_selected_path7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels7.8 High
- python pillowPillow: Double free in ImagingScaleAffine on calloc failure via Image.transform8.7 High
- python pillowPillow: Heap use-after-free when encoding TIFF to an in-memory buffer5.9 Medium
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 moreCpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv6.5 Mediumlibcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 moreCpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread8.1 High- surrealdbSurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends8.8 High
- michaelrsweet mxmlmichaelrsweet mxml mxml-file.c mxml_load_data use after free5.1 Medium
gpacUbuntuA heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC...5.5 MediumgpacUbuntuA use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC...5.5 Mediumlibtext-csv-xs-perlDebian,perl-Text-CSV_XSAzure Linux +1 moreText::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline9.8 Critical- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copy3.6 Low
- devolutions server, mariadb +1 moreMariaDB: Use-after-free with a large number of SYS_REFCURSOR's9.9 Critical
- google chromeUse after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +5 more +7 moreMicrosoft Office Word Information Disclosure Vulnerability6.5 Medium
- linux, linux kernel +1 moreipv4: free inet_opt and ireq_opt after an RCU grace period9.8 Critical
- freebsdMemory safety bugs in kqueue copy-on-fork implementation7.0 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap8.8 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used7.1 High
- juniper networks junos osJunos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash8.2 High
- f5 nginx open source, nginx plus +1 moreNGINX ngx_http_core_module vulnerability9.2 Critical
- curlHTTP/2 upload Use-After-Free8.1 High
- curlFTP wildcard write callback mixup9.1 Critical
- qt for mcusMemory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs6.5 Medium
- Show moreLoading…