CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn multiple locations, there is a possible use-after-free due to a race condition. This could...8.4 High
- mediatek, inc. mediatek chipsetIn GPU pdma, there is a possible memory corruption due to use after free. This could lead to...7.8 High
- mediatek, inc. mediatek chipsetIn GPU pdma, there is a possible escalation of privilege due to use after free. This could lead...8.4 High
- tesseract-ocr tesseractTesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages6.9 Medium
- ladybirdLadybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()8.8 High
- aws kmstool-enclaveUse-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c8.7 High
- sqliteSQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()6.8 Medium
- sqliteSQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()6.8 Medium
- imagination technologies graphics ddkGPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM7.1 High
- imagination technologies graphics ddkGPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()7.0 High
- google chromeUse after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote...9.6 Critical
- google chromeUse after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote...6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8 High
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- google chromeUse after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeUse after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeOut of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeImproper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed...9.6 Critical
- google chromeUse after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeUse after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote...9.6 Critical
- google chromeMemory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeMemory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote...9.6 Critical
- google chromeMemory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote...9.3 Critical
- Show moreLoading…