Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

6,546 results · Feed

  • High 7.6
    CVE-2022-23584

    Use after free in `DecodePng` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an unspecified …

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Unscored —
    CVE-2022-0487

    A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick i…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-4154 Public exploit

    A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 8.8
    CVE-2021-40420

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A …

  • High 8.4
    CVE-2022-0443

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.3
    CVE-2022-23597

    Remote program execution with user interaction

    Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, fo…

  • High 8.4
    CVE-2022-0413

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-4083

    A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers i…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 7.8
    CVE-2021-44710 EPSS 11%

    Adobe Acrobat Reader Use-after-free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44705

    Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2021-44713

    Adobe Acrobat Reader DC Use After Free could lead to Application denial-of-service

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denial of service. Exploi…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44704 EPSS 11%

    Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-45064 EPSS 11%

    Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44706

    Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • Low 3.3
    CVE-2021-45063

    Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An atta…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44701 EPSS 21%

    Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-45062 EPSS 16%

    Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the conte…

    Adobe Acrobat Reader
  • Low 3.3
    CVE-2021-45051

    Adobe Bridge JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability…

    Adobe Bridge
  • High 7.8
    CVE-2021-34939

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34937

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34936

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34933

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34931

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34922

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34919

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34917

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34911

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34909

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34908

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34906

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34895

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34894

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34891

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • Low 3.3
    CVE-2021-34886

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

    Bentley View
  • Low 3.3
    CVE-2021-34884

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

    Bentley View
  • High 7.8
    CVE-2021-34879

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34872

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • Low 3.3
    CVE-2021-45059

    Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

    Adobe InDesign
  • Low 3.3
    CVE-2021-45054

    Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exp…

    Adobe InCopy
  • Medium 6.8
    CVE-2022-0156

    Use After Free in vim/vim

    vim is vulnerable to Use After Free

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine