cve.bz

CWE-416: Use After Free, page 112

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-2585EPSS 1.3%

    It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.

  2. 7.8CVE-2023-37578EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  3. 7.8CVE-2023-37577EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  4. 7.8CVE-2023-37576EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  5. 7.8CVE-2023-37575EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  6. 7.8CVE-2023-37574EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  7. 7.8CVE-2023-37573EPSS 0.4%

    Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  8. 5.5CVE-2023-5091EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r37p…

  9. 9.8CVE-2024-22088EPSS 0.7%

    Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled.

  10. 7.0CVE-2023-6270EPSS 0.4%

    A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct…

  11. 8.8CVE-2024-0225EPSS 1.0%

    Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  12. 8.8CVE-2024-0224EPSS 1.0%

    Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  13. 8.8CVE-2024-0222EPSS 1.1%

    Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  14. 3.3CVE-2024-0217EPSS 0.2%

    A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a…

  15. 5.5CVE-2023-49554EPSS 0.4%

    Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

  16. 6.7CVE-2024-0193EPSS 0.8%

    A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an …

  17. 3.3CVE-2023-49142EPSS 0.2%

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.

  18. 5.5CVE-2023-49135EPSS 0.2%

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

  19. 5.5CVE-2023-48360EPSS 0.2%

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

  20. 5.5CVE-2023-47857EPSS 0.2%

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.

  21. 7.8CVE-2023-43514EPSS 0.1%

    Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

  22. 7.8CVE-2023-33120EPSS 0.1%

    Memory corruption in Audio when memory map command is executed consecutively in ADSP.

  23. 7.8CVE-2023-33118EPSS 0.1%

    Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.

  24. 7.8CVE-2023-33117EPSS 0.1%

    Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

  25. 7.8CVE-2023-33114EPSS 0.1%

    Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

  26. 7.8CVE-2023-33108EPSS 0.1%

    Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

  27. 7.8CVE-2023-33094EPSS 0.1%

    Memory corruption while running VK synchronization with KASAN enabled.

  28. 7.5CVE-2023-52266EPSS 0.7%

    ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this.

  29. 9.8CVE-2023-7152EPSS 0.9%

    A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The ex…

  30. 7.0CVE-2023-6932EPSS 0.4%

    A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object whic…

  31. 8.8CVE-2023-6862EPSS 1.0%

    A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 115.6 and Thunderbird < 115.6.

  32. 8.8CVE-2023-6859EPSS 1.1%

    A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

  33. 7.8CVE-2023-6817EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead doubl…

  34. 8.8CVE-2023-6707EPSS 0.7%

    Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  35. 8.8CVE-2023-6706EPSS 0.7%

    Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit…

  36. 8.8CVE-2023-6705EPSS 0.7%

    Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  37. 8.8CVE-2023-6704EPSS 0.7%

    Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High)

  38. 8.8CVE-2023-6703EPSS 0.7%

    Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  39. 7.8CVE-2023-48633EPSS 0.6%

    Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…

  40. 7.8CVE-2023-47075EPSS 0.5%

    Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

  41. 7.8CVE-2022-22942ExploitEPSS 2.6%

    The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.

  42. 8.1CVE-2023-35628EPSS 93%

    Windows MSHTML Platform Remote Code Execution Vulnerability

  43. 7.5CVE-2023-46156EPSS 1.2%

    Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

  44. 6.7CVE-2023-48414EPSS 0.1%

    In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

  45. 9.6CVE-2023-35618EPSS 2.9%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  46. 7.5CVE-2023-46751EPSS 1.5%

    An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.

  47. 8.8CVE-2023-6510EPSS 1.0%

    Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium secur…

  48. 8.8CVE-2023-6509EPSS 1.0%

    Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium s…

  49. 8.8CVE-2023-6508EPSS 1.0%

    Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  50. 7.8CVE-2023-33063KEVEPSS 0.7%

    Memory corruption in DSP Services during a remote call from HLOS to DSP.