Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

4,663 results · Clear filters · Feed

  • High 7.8
    CVE-2022-24062

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

    Sante DICOM Viewer Pro
  • High 7.0
    CVE-2022-24050

    MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attac…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2021-46655

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-46633

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46627

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-46613

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46609

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46601

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46597

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46592

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46588

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46587

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46582

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46580

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46579

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46578

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46575

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46573

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46571

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.0.…

    Bentley View
  • High 7.8
    CVE-2021-46567

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 8.4
    CVE-2022-0559

    Use After Free in radareorg/radare2

    Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.8
    CVE-2021-4102 Exploited

    Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corr…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Dec 15, 2021
  • High 8.8
    CVE-2022-0520

    Use After Free in radareorg/radare2

    Use After Free in NPM radare2.js prior to 5.6.2.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.1
    CVE-2022-0139

    Use After Free in radareorg/radare2

    Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.8
    CVE-2022-0523

    Use After Free in radareorg/radare2

    Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.6
    CVE-2022-23584

    Use after free in `DecodePng` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an unspecified …

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • High 8.8
    CVE-2021-40420

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A …

  • High 8.4
    CVE-2022-0443

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.3
    CVE-2022-23597

    Remote program execution with user interaction

    Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, fo…

  • High 8.4
    CVE-2022-0413

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2021-44710 EPSS 11%

    Adobe Acrobat Reader Use-after-free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44705

    Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44704 EPSS 11%

    Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-45064 EPSS 11%

    Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44706

    Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44701 EPSS 21%

    Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-45062 EPSS 16%

    Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-34939

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34937

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34936

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View