Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

6,546 results · Feed

  • Unscored —
    CVE-2018-17618

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17619

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17615

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17623

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17624

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17621

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • High 8.1
    CVE-2018-1000807

    PyOpenSSL Use-After-Free vulnerability

    Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack a…

    pyopenssl pyopenssl pyopenssl py-openssl Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2018-14809

    Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote co…

    Fuji Electric V-Server
  • Unscored —
    CVE-2018-10496

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Br…

    Samsung Samsung Internet Browser
  • Medium 5.3
    CVE-2018-14625

    A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from w…

    [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  • Unscored —
    CVE-2018-6555

    The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel …

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.2
    CVE-2018-14619

    A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was be…

    [UNKNOWN] kernel: linux Debian
  • High 8.8
    CVE-2017-15412

    Nokogiri gem, via libxml, is affected by DoS vulnerabilities

    Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    chromium-browser oxide-qt libxml2 libxml2 Browsers Debian Ubuntu RubyGems
  • High 7.8
    CVE-2018-10902

    It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Low 3.3
    CVE-2016-8623

    A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-aft…

    The curl Project curl curl curl Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2016-8619

    The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

    The curl Project curl curl curl Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2016-8618

    The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to …

    The curl Project curl curl curl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-11617

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-11619

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-11618

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14288

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14299

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14293

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14308

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14305

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14296

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14304

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14309

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14302

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14303

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14307

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14298

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14314

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14283

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14292

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14294

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14284

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14297

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14312

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14291

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader