cve.bz

CWE-416: Use After Free, page 116

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2023-4574EPSS 0.7%

    When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have l…

  2. 6.5CVE-2023-4573EPSS 0.6%

    When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, …

  3. 7.8CVE-2022-30644EPSS 0.6%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

  4. 3.3CVE-2021-44189EPSS 0.4%

    Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations…

  5. 7.8CVE-2021-43753EPSS 0.5%

    Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege escalation. Exploitation of this issue requires user interaction in that a vict…

  6. 5.5CVE-2021-40790EPSS 0.3%

    Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations …

  7. 7.8CVE-2023-4623EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set)…

  8. 7.0CVE-2023-4622EPSS 0.6%

    A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without lockin…

  9. 7.0CVE-2023-4244EPSS 0.2%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element …

  10. 7.8CVE-2023-4208EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into…

  11. 7.8CVE-2023-4207EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is called on an existing filter, the whole tcf_result struct is always copied into t…

  12. 7.8CVE-2023-4206EPSS 0.6%

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied…

  13. 7.8CVE-2023-4015EPSS 0.3%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_dea…

  14. 7.8CVE-2023-3777EPSS 0.4%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and…

  15. 5.5CVE-2021-39859EPSS 0.5%

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leve…

  16. 7.8CVE-2021-21088EPSS 0.4%

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability t…

  17. 7.8CVE-2023-3472EPSS 0.2%

    Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.

  18. 8.8CVE-2023-4763EPSS 1.2%

    Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  19. 7.8CVE-2023-33021EPSS 0.1%

    Memory corruption in Graphics while processing user packets for command submission.

  20. 5.5CVE-2023-4755EPSS 0.3%

    Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.

  21. 7.8CVE-2023-4752EPSS 0.6%

    Use After Free in GitHub repository vim/vim prior to 9.0.1858.

  22. 7.8CVE-2023-4750EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to 9.0.1857.

  23. 7.8CVE-2023-4733EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to 9.0.1840.

  24. 6.5CVE-2023-20849EPSS 0.1%

    In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS…

  25. 6.4CVE-2023-20835EPSS 0.07%

    In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue…

  26. 6.4CVE-2023-20834EPSS 0.07%

    In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID…

  27. 7.8CVE-2023-3297EPSS 0.3%

    In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

  28. 9.8CVE-2023-40187EPSS 1.2%

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffe…

  29. 9.8CVE-2023-39355EPSS 1.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS`…

  30. 6.3CVE-2023-4611EPSS 0.3%

    A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead …

  31. 8.8CVE-2023-4572EPSS 1.0%

    Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  32. 5.5CVE-2023-39562EPSS 0.3%

    GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.

  33. 7.5CVE-2023-36741EPSS 2.1%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  34. 8.8CVE-2022-46884EPSS 0.5%

    A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on De…

  35. 8.8CVE-2023-4430EPSS 9.1%

    Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  36. 8.8CVE-2023-4429EPSS 0.9%

    Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  37. 7.5CVE-2022-48560EPSS 2.0%

    A use-after-free exists in Python through 3.9 via heappushpop in heapq.

  38. 7.5CVE-2022-28073EPSS 0.9%

    A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.

  39. 7.5CVE-2022-28071EPSS 0.9%

    A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.

  40. 9.8CVE-2021-33390EPSS 0.8%

    dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

  41. 7.5CVE-2021-32421EPSS 0.8%

    dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.

  42. 4.4CVE-2020-27418EPSS 0.2%

    A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.

  43. 5.5CVE-2020-21896EPSS 0.5%

    A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.

  44. 7.8CVE-2020-21722EPSS 0.7%

    Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.

  45. 7.8CVE-2020-19725EPSS 1.0%

    There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code ex…

  46. 5.5CVE-2020-18780EPSS 0.3%

    A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.

  47. 8.8CVE-2023-36787EPSS 2.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  48. 6.0CVE-2023-4394EPSS 0.2%

    A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel infor…

  49. 7.1CVE-2023-4387EPSS 0.2%

    A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free w…

  50. 8.8CVE-2023-4366EPSS 0.7%

    Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Med…