cve.bz

CWE-416: Use After Free, page 115

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.3CVE-2023-36583EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  2. 7.0CVE-2023-36565EPSS 0.4%

    Microsoft Office Graphics Elevation of Privilege Vulnerability

  3. 5.3CVE-2023-41675EPSS 1.4%

    A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to cra…

  4. 7.5CVE-2023-40632EPSS 0.5%

    In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed

  5. 6.5CVE-2023-45322EPSS 1.0%

    libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CV…

  6. 8.8CVE-2023-39928EPSS 1.4%

    A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to …

  7. 9.8CVE-2023-38703EPSS 1.6%

    PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as…

  8. 4.7CVE-2023-34970EPSS 0.2%

    A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in tur…

  9. 4.7CVE-2023-33200EPSS 0.2%

    A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

  10. 7.8CVE-2023-33039EPSS 0.1%

    Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

  11. 7.8CVE-2023-33029EPSS 0.1%

    Memory corruption in DSP Service during a remote call from HLOS to DSP.

  12. 7.8CVE-2023-5345EPSS 0.5%

    A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to …

  13. 5.5CVE-2023-4211KEVEPSS 1.0%

    A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

  14. 8.8CVE-2023-5187EPSS 0.8%

    Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Hi…

  15. 8.8CVE-2023-5186EPSS 0.9%

    Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security …

  16. 6.6CVE-2023-5197EPSS 0.4%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-…

  17. 9.8CVE-2023-5175EPSS 1.0%

    During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox < 118.

  18. 9.8CVE-2023-5174EPSS 1.2%

    If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. *This bug only affects Firefox on Windows wh…

  19. 9.8CVE-2023-5172EPSS 1.0%

    A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 118.

  20. 6.5CVE-2023-5171EPSS 1.1%

    During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR <…

  21. 7.8CVE-2023-41995EPSS 0.3%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

  22. 7.8CVE-2023-41071EPSS 0.4%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges.

  23. 8.8CVE-2023-39434EPSS 1.7%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

  24. 7.8CVE-2023-32541EPSS 0.7%

    A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger t…

  25. 9.8CVE-2023-39453EPSS 1.3%

    A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerabili…

  26. 7.5CVE-2023-42482EPSS 0.3%

    Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free.

  27. 7.8CVE-2023-41375EPSS 0.2%

    Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.…

  28. 5.9CVE-2023-4806EPSS 1.6%

    A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _n…

  29. 9.6CVE-2023-36735EPSS 2.1%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  30. 7.1CVE-2023-36562EPSS 1.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  31. 8.2CVE-2023-2680EPSS 0.2%

    This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CV…

  32. 5.9CVE-2023-4813EPSS 1.9%

    A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hos…

  33. 7.8CVE-2023-4921EPSS 0.4%

    A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-…

  34. 7.8CVE-2023-38161EPSS 0.6%

    Windows GDI Elevation of Privilege Vulnerability

  35. 5.5CVE-2023-38160EPSS 0.9%

    Windows TCP/IP Information Disclosure Vulnerability

  36. 7.8CVE-2023-38139EPSS 0.9%

    Windows Kernel Elevation of Privilege Vulnerability

  37. 7.8CVE-2023-36804EPSS 0.6%

    Windows GDI Elevation of Privilege Vulnerability

  38. 7.8CVE-2023-36802KEVEPSS 28%

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  39. 7.8CVE-2023-36760EPSS 0.7%

    3D Viewer Remote Code Execution Vulnerability

  40. 7.8CVE-2023-38075EPSS 0.5%

    A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…

  41. 7.8CVE-2023-35687EPSS 0.2%

    In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi…

  42. 7.8CVE-2023-35666EPSS 0.10%

    In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp…

  43. 8.8CVE-2023-35658EPSS 0.2%

    In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction i…

  44. 7.8CVE-2023-39070EPSS 0.3%

    An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.

  45. 5.5CVE-2023-41000EPSS 0.3%

    GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

  46. 7.8CVE-2022-34227EPSS 2.8%

    Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current …

  47. 7.8CVE-2022-34224EPSS 2.9%

    Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current …

  48. 7.8CVE-2022-28835EPSS 0.5%

    Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…

  49. 7.8CVE-2019-16471EPSS 0.3%

    Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  50. 6.5CVE-2023-4575EPSS 0.7%

    When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have le…