cve.bz

CWE-416: Use After Free, page 114

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2023-1194EPSS 1.1%

    An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due…

  2. 7.3CVE-2023-36034EPSS 2.7%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  3. 6.3CVE-2023-3397EPSS 0.2%

    A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel info…

  4. 6.5CVE-2023-1193EPSS 1.0%

    A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work.

  5. 6.5CVE-2023-1192EPSS 1.1%

    A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it fa…

  6. 8.8CVE-2023-5856EPSS 1.2%

    Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever…

  7. 8.8CVE-2023-5855EPSS 1.0%

    Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security se…

  8. 8.8CVE-2023-5854EPSS 1.2%

    Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severi…

  9. 8.8CVE-2023-5852EPSS 1.1%

    Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severi…

  10. 8.8CVE-2023-5178EPSS 9.6%

    A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and doubl…

  11. 6.5CVE-2023-21395EPSS 0.2%

    In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.

  12. 8.8CVE-2023-21392EPSS 0.2%

    In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetooth device with no additional execution privileges needed. User interaction is not…

  13. 7.8CVE-2023-21381EPSS 0.10%

    In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi…

  14. 8.8CVE-2023-21361EPSS 0.2%

    In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional execution privileges needed. User interaction i…

  15. 7.8CVE-2023-21355EPSS 0.09%

    In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  16. 5.5CVE-2023-44323EPSS 1.5%

    Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the curre…

  17. 7.8CVE-2023-40140EPSS 0.2%

    In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed.…

  18. 7.0CVE-2023-40131EPSS 0.09%

    In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  19. 5.5CVE-2023-46246EPSS 0.4%

    Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cm…

  20. 7.0CVE-2023-5574EPSS 0.6%

    A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped fro…

  21. 4.7CVE-2023-5380EPSS 0.7%

    A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from …

  22. 8.8CVE-2023-41976EPSS 1.7%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead t…

  23. 7.8CVE-2023-40404EPSS 1.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

  24. 7.5CVE-2023-5728EPSS 1.3%

    During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

  25. 8.8CVE-2023-5472EPSS 1.3%

    Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  26. 7.8CVE-2023-5633EPSS 0.3%

    The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest w…

  27. 7.8CVE-2023-34366EPSS 0.7%

    A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause memory corruption, resulting in arbitrary code execution. Victim would need to open a mal…

  28. 7.5CVE-2023-42459EPSS 1.0%

    Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This c…

  29. 7.8CVE-2023-45898EPSS 0.3%

    The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.

  30. 8.8CVE-2023-5476EPSS 0.9%

    Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  31. 6.3CVE-2023-5473EPSS 0.7%

    Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

  32. 8.8CVE-2023-5218EPSS 1.3%

    Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  33. 7.8CVE-2023-5535EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to v9.0.2010.

  34. 6.7CVE-2023-35660EPSS 0.10%

    In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not …

  35. 7.5CVE-2023-44095EPSS 0.5%

    Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.

  36. 5.5CVE-2023-38216EPSS 0.4%

    Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  37. 8.1CVE-2023-41774EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  38. 8.1CVE-2023-41773EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  39. 8.1CVE-2023-41771EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  40. 8.1CVE-2023-41770EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  41. 8.1CVE-2023-41769EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  42. 8.1CVE-2023-41768EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  43. 8.1CVE-2023-41767EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  44. 8.1CVE-2023-41765EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  45. 8.1CVE-2023-38166EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  46. 7.0CVE-2023-36902EPSS 0.5%

    Windows Runtime Remote Code Execution Vulnerability

  47. 7.0CVE-2023-36776EPSS 2.1%

    Win32k Elevation of Privilege Vulnerability

  48. 7.8CVE-2023-36743EPSS 3.6%

    Win32k Elevation of Privilege Vulnerability

  49. 7.8CVE-2023-36726EPSS 0.6%

    Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

  50. 7.8CVE-2023-36605EPSS 0.5%

    Windows Named Pipe Filesystem Elevation of Privilege Vulnerability