CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- nlnet labs unboundDNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.7.5 High
- freerdpFreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU7.1 High
- php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 moreRCE via stale global state9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 moreRCE via OOM corruption9.2 Critical
gpacUbuntuA heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project...5.5 MediumgpacUbuntuA use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC...5.5 MediumgpacUbuntuA heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC...5.5 Medium- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...5.3 Medium
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...5.3 Medium
- oracle corporation graalvm enterprise edition, java se, javafx +2 moreVulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of...5.4 Medium
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...4.7 Medium
- google chromeUse after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- Show moreLoading…