Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

4,663 results · Clear filters · Feed

  • High 7.8
    CVE-2021-34849

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34848

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34847 EPSS 62%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34846

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34845

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34844

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34843

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34842 EPSS 13%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34841

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34840

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34839

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34838

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34837

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34836

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34835

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34834

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34833 EPSS 96%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34832

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34831

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.3…

    Foxit Reader
  • High 8.8
    CVE-2021-30560 EPSS 20%

    Nokogiri has vulnerable dependencies on libxml2 and libxslt

    Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Azure Linux Alpine RubyGems
  • High 8.8
    CVE-2021-30554 Exploited

    Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap c…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-31516

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninj…

    Vector 35 Binary Ninja
  • High 7.5
    CVE-2021-22545

    Use-after-free in BinDiff

    An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7

    Google Bindiff
  • High 8.8
    CVE-2021-28562

    Adobe Acrobat Reader use-after-free could lead to arbitrary code execution

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability when executing search queries through Javascript. An unauthenticated attacker could …

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-31502

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31497

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 8.8
    CVE-2021-29256 Exploited

    . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information …

    KEV Jul 7, 2023
  • High 8.8
    CVE-2021-3518 EPSS 22%

    Nokogiri Implements libxml2 version vulnerable to use-after-free

    There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, an…

    libxml2 libxml2 nokogiri libxml2 Debian Ubuntu Alpine RubyGems
  • High 7.8
    CVE-2021-23134

    Linux kernel llcp_sock_bind/connect use-after-free

    Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2021-21822

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A …

  • High 8.8
    CVE-2021-28663 Exploited Public exploit EPSS 12%

    The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-31470

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31460

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31459

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31458

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31457

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31456

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31455

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31453

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader
  • High 7.8
    CVE-2021-31451

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.3…

    Foxit Reader