CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeUse after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote...9.6 Critical
- freerdpFreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module8.2 High
- d3tn gmbh µd3tnUse After Free in µD3TN5.9 Medium
- zephyrproject zephyrUse-after-free via dynamically allocated message queue retained by the CAN RX filter8.8 High
- zephyrproject zephyrUse-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress4.8 Medium
- bitdefender pybddisasmUse-after-free in INSTRUX array members in pybddisasm6.9 Medium
- bitdefender pybddisasmUse-after-free in INSTRUX structure members in pybddisasm6.9 Medium
- eclipse foundation threadxThreadX Modules invokes trace-full callbacks after module unload7.3 High
- freerdpFreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close8.2 High
- freerdpFreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext8.7 High
- freerdpFreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close9.3 Critical
- google androidThe vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an...6.7 Medium
- google androidA Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free...2.5 Low
- google androidThe report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware...7.8 High
- huawei harmonyosUAF vulnerability in the location service module. Impact: Successful exploitation of this...5.9 Medium
- vstarcam o-kam superipcamVStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free6.9 Medium
- mediatek mt6993 firmware, mt8910 firmware, mediatek, inc. mediatek chipset +2 moreIn GPU pdma, there is a possible escalation of privilege due to a missing permission check. This...8.4 High
- mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +33 more +35 moreIn usb, there is a possible system crash due to use after free. This could lead to local denial...4.4 Medium
- mediatek mt6858 firmware, mt6881 firmware, mt6993 firmware +6 more +8 moreIn usb, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- mediatek mt2735 firmware, mt2737 firmware, mt6761 firmware +30 more +32 moreIn usb, there is a possible system crash due to use after free. This could lead to local denial...4.4 Medium
- mediatek mt6858 firmware, mt6878 firmware, mt6881 firmware +18 more +20 moreIn adsp, there is a possible escalation of privilege due to use after free. This could lead to...6.7 Medium
- mediatek mt6858 firmware, mt6878 firmware, mt6881 firmware +18 more +20 moreIn adsp, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +39 more +41 moreIn afe, there is a possible system crash due to use after free. This could lead to local...6.7 Medium
- google androidIn SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling...9.8 Critical
- google androidIn fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory...8.4 High
- google androidIn RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a...7.5 High
- google androidIn platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use...7.8 High
- google androidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...8.4 High
- google androidIn multiple locations, there is a possible memory corruption due to a use-after-free. This could...8.4 High
- google androidIn do_fault_around of memory.c, there is a possible use after free due to a logic error in the...8.4 High
- google androidIn png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This...9.8 Critical
- google androidIn multiple locations, there is a possible memory safety issue due to a use-after-free. This...9.8 Critical
- google androidIn decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This...8.1 High
- google androidIn fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free....8.4 High
- google androidIn multiple functions of base.c, there is a possible use-after-free due to a race condition. This...8.4 High
- google androidIn multiple functions of dma-buf.c, there is a possible use after free due to a race condition....8.4 High
- google androidIn ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This...8.4 High
- google androidIn multiple functions of fork.c, there is a possible use after free due to a logic error in the...8.4 High
- google androidIn IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due...9.8 Critical
- google androidIn NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling...9.8 Critical
- google androidIn edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a...7.8 High
- google androidIn smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm...7.8 High
- google androidIn port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could...7.0 High
- google androidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...9.8 Critical
- google androidIn multiple locations, there is a possible memory safety issue due to a use-after-free. This...8.4 High
- Show moreLoading…