cve.bz

CWE-416: Use After Free, page 113

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-22668EPSS 0.1%

    Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

  2. 7.8CVE-2023-22383EPSS 0.1%

    Memory Corruption in camera while installing a fd for a particular DMA buffer.

  3. 7.5CVE-2023-49288EPSS 4.8%

    Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from …

  4. 8.8CVE-2023-40088EPSS 1.7%

    In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privil…

  5. 7.8CVE-2023-40084EPSS 0.2%

    In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  6. 6.7CVE-2023-42722EPSS 0.1%

    In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed

  7. 7.8CVE-2023-5427EPSS 0.3%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain …

  8. 8.8CVE-2023-6351EPSS 0.9%

    Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)

  9. 8.8CVE-2023-6350EPSS 1.3%

    Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)

  10. 8.8CVE-2023-6347EPSS 1.1%

    Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  11. 8.8CVE-2023-6346EPSS 1.0%

    Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  12. 5.5CVE-2023-42365EPSS 0.4%

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

  13. 5.5CVE-2023-42364EPSS 0.4%

    A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

  14. 5.5CVE-2023-42363EPSS 0.4%

    A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

  15. 8.8CVE-2023-38573EPSS 1.9%

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to mem…

  16. 8.8CVE-2023-32616EPSS 1.8%

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory…

  17. 4.7CVE-2023-48706EPSS 0.5%

    Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the…

  18. 8.8CVE-2023-6207EPSS 0.9%

    Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

  19. 6.5CVE-2023-6205EPSS 0.9%

    It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

  20. 5.5CVE-2023-5341EPSS 0.5%

    A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

  21. 6.5CVE-2023-48024EPSS 0.6%

    Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c

  22. 4.3CVE-2023-48231EPSS 0.7%

    Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in com…

  23. 6.6CVE-2023-36008EPSS 0.6%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  24. 7.8CVE-2023-47055EPSS 0.4%

    Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

  25. 5.5CVE-2023-44328EPSS 0.4%

    Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  26. 7.8CVE-2023-44372EPSS 2.6%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

  27. 7.8CVE-2023-44371EPSS 4.9%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

  28. 7.8CVE-2023-44367EPSS 2.1%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

  29. 5.5CVE-2023-44361EPSS 2.1%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypa…

  30. 7.8CVE-2023-44359EPSS 2.1%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

  31. 7.8CVE-2023-44336EPSS 2.3%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

  32. 7.8CVE-2023-48011EPSS 0.3%

    GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.

  33. 8.8CVE-2023-6112EPSS 25%

    Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  34. 8.8CVE-2023-5997EPSS 1.0%

    Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  35. 5.5CVE-2023-26589EPSS 0.2%

    Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access.

  36. 3.3CVE-2023-20519EPSS 0.2%

    A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.

  37. 7.8CVE-2023-36041EPSS 57%

    Microsoft Excel Remote Code Execution Vulnerability

  38. 7.8CVE-2023-6111EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list …

  39. 9.8CVE-2023-46850EPSS 2.0%

    Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.

  40. 6.4CVE-2023-39198EPSS 0.4%

    A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This…

  41. 5.5CVE-2023-6039EPSS 0.3%

    A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx in the Linux Kernel. This flaw allows a local attacker to crash the system when the LAN78XX USB device detache…

  42. 5.5CVE-2023-4891EPSS 0.2%

    A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service.

  43. 5.5CVE-2023-46362EPSS 0.3%

    jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc.

  44. 8.8CVE-2023-5996EPSS 2.0%

    Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  45. 7.5CVE-2023-46769EPSS 0.6%

    Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.

  46. 7.5CVE-2023-46768EPSS 0.6%

    Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.

  47. 7.8CVE-2023-4295EPSS 0.3%

    A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

  48. 7.8CVE-2023-33074EPSS 0.1%

    Memory corruption in Audio when SSR event is triggered after music playback is stopped.

  49. 4.3CVE-2023-47233EPSS 0.3%

    The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be explo…

  50. 7.0CVE-2023-1476EPSS 0.2%

    A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially e…