cve.bz

CWE-416: Use After Free, page 106

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-26898EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethe…

  2. 7.8CVE-2024-26895EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilc_netdev_cleanup currently triggers a KASAN warning, which can be observed on interface …

  3. 7.8CVE-2024-26892EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should …

  4. 6.5CVE-2024-26886EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a deadlock as shown bellow, so instead of using sock_sock this uses sk_receive_queu…

  5. 6.4CVE-2024-26875EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 drivers/media/usb/pvrusb2/pvr…

  6. 7.0CVE-2024-26872EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port(). This seems t…

  7. 5.5CVE-2024-26866EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allocating/disposing memory manually with spi_alloc_host()/spi_alloc_target(), but uses devm_s…

  8. 7.8CVE-2024-26865EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warning of netns tracker [0] followed by KASAN splat [1] and another ref tracker warni…

  9. 7.8CVE-2024-26856EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use after free inside sparx5_del_mact_entry Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the ent…

  10. 7.8CVE-2024-26852EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_notify() [1] Commit f7225172f25a ("net/ipv6: prevent use…

  11. 5.5CVE-2024-26838EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assocated with freeing an IRQ. [50006.466686] Call Trace: [50006.466691] <IRQ> [500…

  12. 8.8CVE-2024-3837EPSS 1.2%

    Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  13. 8.8CVE-2024-3834EPSS 1.2%

    Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  14. 6.9CVE-2024-30378EPSS 0.2%

    A Use After Free vulnerability in command processing of Juniper Networks Junos OS on MX Series allows a local, authenticated attacker to cause the broadband edge service manager daemon (bbe-smgd) to crash upon execution of specific CLI com…

  15. 4.0CVE-2024-3861EPSS 0.2%

    If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

  16. 7.8CVE-2024-3857EPSS 0.2%

    The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

  17. 8.8CVE-2024-3856EPSS 0.6%

    A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox < 125.

  18. 7.5CVE-2024-3853EPSS 0.4%

    A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.

  19. 7.1CVE-2024-30386EPSS 0.3%

    A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause l2ald to crash leading to a Denial-of-Service (DoS). I…

  20. 6.5CVE-2024-3515EPSS 0.8%

    Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  21. 5.5CVE-2021-47209EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfs_rq's Kevin is reporting crashes which point to a use-after-free of a cfs_rq in update_blocked_averages(). Initial…

  22. 7.8CVE-2021-47204EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to av…

  23. 7.8CVE-2021-47200EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry…

  24. 7.8CVE-2021-47198EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfc_unr…

  25. 7.8CVE-2021-47196EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver Preset both receive and send CQ pointers prior to call to the drivers and overwrite it later again til…

  26. 5.5CVE-2021-47195EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But m…

  27. 8.8CVE-2024-29043EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  28. 7.8CVE-2024-26241EPSS 0.7%

    Win32k Elevation of Privilege Vulnerability

  29. 7.8CVE-2024-26237EPSS 0.7%

    Windows Defender Credential Guard Elevation of Privilege Vulnerability

  30. 6.6CVE-2024-26233EPSS 1.6%

    Windows DNS Server Remote Code Execution Vulnerability

  31. 6.6CVE-2024-26231EPSS 1.5%

    Windows DNS Server Remote Code Execution Vulnerability

  32. 7.8CVE-2024-26230EPSS 24%

    Windows Telephony Server Elevation of Privilege Vulnerability

  33. 6.6CVE-2024-26227EPSS 1.5%

    Windows DNS Server Remote Code Execution Vulnerability

  34. 6.6CVE-2024-26224EPSS 1.6%

    Windows DNS Server Remote Code Execution Vulnerability

  35. 6.6CVE-2024-26223EPSS 1.6%

    Windows DNS Server Remote Code Execution Vulnerability

  36. 6.6CVE-2024-26222EPSS 1.8%

    Windows DNS Server Remote Code Execution Vulnerability

  37. 6.6CVE-2024-26221EPSS 1.8%

    Windows DNS Server Remote Code Execution Vulnerability

  38. 7.3CVE-2024-21409EPSS 2.5%

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  39. 4.4CVE-2024-23658EPSS 0.08%

    In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed

  40. 7.5CVE-2024-30416EPSS 0.4%

    Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability.

  41. 8.8CVE-2024-3158EPSS 0.8%

    Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  42. 6.7CVE-2024-2312EPSS 0.4%

    GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

  43. 7.8CVE-2024-31083EPSS 1.9%

    A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entr…

  44. 7.8CVE-2024-3299EPSS 0.4%

    Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attac…

  45. 7.8CVE-2024-26804EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow…

  46. 5.5CVE-2024-26801EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO …

  47. 7.8CVE-2024-26800EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and crypto_aead_decrypt returns -EBUSY, tls_do_decryption will wait unt…

  48. 7.8CVE-2024-26793EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_newlink() The gtp_link_ops operations structure for the subsystem must be registered after registering the gtp_net_ops …

  49. 7.8CVE-2024-30366EPSS 0.8%

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this …

  50. 7.8CVE-2024-30334EPSS 0.9%

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit thi…