CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Scrolling and Overflow component6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Internationalization component6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: Standard Library component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine component7.3 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout component7.3 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: Canvas2D component7.3 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component6.3 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.1 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.5 High
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.7 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.6 High
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...9.1 Critical
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.7 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...6.2 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.5 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.7 High
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...7.5 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing7.1 High
- zephyrproject zephyrUse of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic host5.3 Medium
- netty netty-tcnativenetty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback8.2 High
- zephyrproject zephyrStale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames7.8 High
- openwrt odhcpdodhcpd DHCPv6 IA dangling first pointer use-after-free8.8 High
- qtUse-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt2.1 Low
- msgpack msgpack-pythonMessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure7.5 High
- apache software foundation traffic serverApache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs8.8 High
- apache software foundation brpcApache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message5.4 Medium
- apache software foundation brpcApache bRPC: Heap Use-After-Free in RTMP Abort Message Handling7.5 High
- Show moreLoading…