Weakness (CWE)
CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
How to prevent it (2 mitigations)
-
Architecture and Design
Choose a language that provides automatic memory management.
-
Implementation
When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.
Source: MITRE CWE-416
4,663 results · Clear filters · Feed
-
High 7.8
In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. Th…
-
High 7.8
In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local esc…
-
High 7.8
In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local e…
-
High 7.8
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local e…
-
High 7.8
In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to lo…
-
High 8.8CVE-2022-42867 EPSS 35%
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, ma…
-
High 7.8
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 8.8
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make im…
-
High 7.8
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/o…
-
High 7.5
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in ver…
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0882.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
-
High 7.8
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /…
-
High 7.0
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition t…
-
High 8.0CVE-2022-42896 Public exploit
Info Leak in l2cap_core in the Linux Kernel
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…
-
High 7.8CVE-2022-3910 Public exploit
Use after free in IO_uring in the Linux Kernel
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which …
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…
-
High 8.8CVE-2022-37332 Public exploit
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…
-
High 8.4
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Comp…
-
High 8.8
Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit h…
-
High 8.8
Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially …
-
High 8.8
Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a us…
-
High 8.8
Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to in…
-
High 8.8
Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit…
-
High 8.8
Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exp…
-
High 7.5
The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vul…
-
High 7.5
The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the displa…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS …
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and …
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9…
-
High 8.8
Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…
-
High 8.8
Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…