cve.bz

CWE-416: Use After Free, page 111

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-24263EPSS 0.7%

    Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_line function at /lotos/src/response.c.

  2. 7.5CVE-2024-24262EPSS 0.7%

    media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-transaction.c.

  3. 7.5CVE-2024-24260EPSS 0.7%

    media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-subscribe.c.

  4. 7.0CVE-2023-5249EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s mem…

  5. 9.8CVE-2020-36773EPSS 0.9%

    Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature…

  6. 7.5CVE-2024-25062EPSS 1.3%

    An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-af…

  7. 8.8CVE-2024-21860EPSS 0.4%

    in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.

  8. 8.3CVE-2024-21399EPSS 1.2%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  9. 7.8CVE-2024-1086KEVEPSS 28%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, an…

  10. 7.8CVE-2024-1085EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active …

  11. 8.8CVE-2024-1077EPSS 0.9%

    Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)

  12. 8.8CVE-2024-1060EPSS 0.9%

    Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  13. 8.8CVE-2024-1059EPSS 1.0%

    Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)

  14. 7.8CVE-2024-21803EPSS 0.5%

    Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/…

  15. 8.3CVE-2024-21385EPSS 1.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  16. 9.6CVE-2024-21326EPSS 1.2%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  17. 8.8CVE-2024-0813EPSS 0.4%

    Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severit…

  18. 8.8CVE-2024-0807EPSS 0.5%

    Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  19. 8.8CVE-2024-0806EPSS 0.4%

    Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)

  20. 6.5CVE-2024-0752EPSS 0.4%

    A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.

  21. 6.5CVE-2024-0746EPSS 0.7%

    A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

  22. 7.0CVE-2023-51043EPSS 0.2%

    In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

  23. 7.8CVE-2023-51042EPSS 0.3%

    In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.

  24. 5.5CVE-2024-23848EPSS 0.3%

    In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.

  25. 7.1CVE-2024-0775EPSS 0.2%

    A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, lea…

  26. 7.8CVE-2024-22956EPSS 0.4%

    swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838

  27. 7.8CVE-2024-22915EPSS 0.4%

    A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution.

  28. 5.5CVE-2024-22914EPSS 0.3%

    A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.

  29. 7.8CVE-2024-22920EPSS 0.3%

    swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.

  30. 4.4CVE-2023-48353EPSS 0.08%

    In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed

  31. 7.4CVE-2024-20952EPSS 0.9%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 2…

  32. 7.8CVE-2024-0582EPSS 13%

    A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate th…

  33. 5.5CVE-2024-0232EPSS 0.4%

    A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentiall…

  34. 7.5CVE-2023-52115EPSS 0.4%

    The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions.

  35. 7.8CVE-2024-0562EPSS 0.3%

    A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth es…

  36. 9.8CVE-2023-37117EPSS 0.9%

    A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

  37. 7.0CVE-2023-51782EPSS 0.3%

    An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition.

  38. 7.0CVE-2023-51781EPSS 0.3%

    An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition.

  39. 7.0CVE-2023-51780EPSS 0.5%

    An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.

  40. 7.8CVE-2023-42870EPSS 0.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.

  41. 7.8CVE-2023-41974KEVEPSS 2.0%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

  42. 9.8CVE-2023-40414EPSS 1.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPadOS 17, tvOS 17, macOS Sonoma 14, Safari 17. Processing web content may lead to arbitrary code execution.

  43. 7.8CVE-2023-32378EPSS 0.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.

  44. 7.5CVE-2024-21307EPSS 2.0%

    Remote Desktop Client Remote Code Execution Vulnerability

  45. 7.8CVE-2024-20683EPSS 4.2%

    Win32k Elevation of Privilege Vulnerability

  46. 7.8CVE-2024-20681EPSS 0.7%

    Windows Subsystem for Linux Elevation of Privilege Vulnerability

  47. 6.6CVE-2024-20655EPSS 1.4%

    Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

  48. 7.0CVE-2022-2602EPSS 1.4%

    io_uring UAF, Unix SCM garbage collection

  49. 7.8CVE-2022-2588EPSS 5.9%

    It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

  50. 7.8CVE-2022-2586KEVEPSS 10%

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.