Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

6,546 results · Feed

  • Unscored —
    CVE-2018-14301

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14306

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14315

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-14310

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Foxit Reader
  • Medium 5.0
    CVE-2018-10876

    A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() f…

    [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  • Medium 4.2
    CVE-2018-10879

    A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry…

    [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.5
    CVE-2016-9079 Exploited Public exploit EPSS 87%

    A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
    KEV Jun 22, 2023
  • Unscored —
    CVE-2018-1178

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-1177

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-1173

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-1180

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9955

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9970

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9962

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9975

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9935

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9967

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9964

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9953

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9961

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9954

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9945

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9968

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9965

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9952

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9959

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9956

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9977

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9958 Public exploit EPSS 62%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9944

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9951 Public exploit

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9957

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9960

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9946

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-9969

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-8843

    Rockwell Automation Arena versions 15.10.00 and prior contains a use after free vulnerability caused by processing spec…

    ICS-CERT Rockwell Automation Arena
  • Unscored —
    CVE-2017-1081

    In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "kee…

    FreeBSD FreeBSD
  • Unscored —
    CVE-2018-0170

    A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remo…

    iOS
  • Unscored —
    CVE-2018-7521

    In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor pars…

    ICS-CERT Omron CX-Supervisor
  • Unscored —
    CVE-2017-16749

    A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.0…