cve.bz

CWE-416: Use After Free, page 118

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2022-4918EPSS 0.7%

    Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium)

  2. 8.8CVE-2022-4916EPSS 0.7%

    Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  3. 8.8CVE-2021-4322EPSS 0.5%

    Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)

  4. 8.8CVE-2021-4320EPSS 0.7%

    Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  5. 8.8CVE-2021-4319EPSS 0.7%

    Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  6. 8.8CVE-2021-4317EPSS 0.7%

    Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  7. 9.8CVE-2023-38598EPSS 1.3%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A…

  8. 7.8CVE-2023-35993EPSS 0.3%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. A…

  9. 7.8CVE-2023-32433EPSS 0.3%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. A…

  10. 7.8CVE-2023-32381EPSS 0.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute a…

  11. 9.8CVE-2023-38669EPSS 0.8%

    Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.

  12. 5.5CVE-2023-39129EPSS 0.3%

    GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.

  13. 7.5CVE-2023-35943EPSS 0.7%

    Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, the CORS filter will segfault and crash Envoy when the `origin` header is removed and de…

  14. 6.5CVE-2023-35942EPSS 0.9%

    Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, gRPC access loggers using listener's global scope can cause a `use-after-free` crash whe…

  15. 7.8CVE-2023-3812EPSS 0.3%

    An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or p…

  16. 7.1CVE-2023-3567EPSS 0.4%

    A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

  17. 6.5CVE-2023-3019EPSS 0.3%

    A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

  18. 4.1CVE-2023-3863EPSS 0.2%

    A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

  19. 7.8CVE-2023-3776EPSS 0.5%

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or de…

  20. 7.8CVE-2023-3610EPSS 0.2%

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NE…

  21. 7.8CVE-2023-3609EPSS 0.5%

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing o…

  22. 7.8CVE-2022-28736EPSS 0.3%

    There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader mo…

  23. 8.8CVE-2023-33876EPSS 1.0%

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to …

  24. 8.8CVE-2023-33866EPSS 0.9%

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previousl…

  25. 8.8CVE-2023-28744EPSS 0.9%

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specifi…

  26. 8.8CVE-2023-27379EPSS 1.1%

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previousl…

  27. 7.5CVE-2023-2912EPSS 0.5%

    Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.

  28. 6.5CVE-2023-36833EPSS 0.3%

    A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of…

  29. 6.7CVE-2023-35693EPSS 0.1%

    In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

  30. 7.8CVE-2023-21255EPSS 0.2%

    In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…

  31. 8.8CVE-2023-3600EPSS 0.6%

    During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.

  32. 7.8CVE-2023-2763EPSS 0.4%

    Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities co…

  33. 7.8CVE-2023-2762EPSS 0.4%

    A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a…

  34. 6.6CVE-2023-35351EPSS 0.7%

    Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

  35. 7.8CVE-2023-35323EPSS 0.7%

    Windows OLE Remote Code Execution Vulnerability

  36. 7.8CVE-2023-35313EPSS 0.7%

    Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

  37. 8.8CVE-2023-35300EPSS 1.4%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  38. 8.8CVE-2023-33153EPSS 1.0%

    Microsoft Outlook Remote Code Execution Vulnerability

  39. 7.8CVE-2023-33149EPSS 0.6%

    Microsoft Office Graphics Remote Code Execution Vulnerability

  40. 6.7CVE-2023-32055EPSS 0.4%

    Active Template Library Elevation of Privilege Vulnerability

  41. 8.8CVE-2023-32038EPSS 1.2%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  42. 7.2CVE-2023-32033EPSS 0.9%

    Microsoft Failover Cluster Remote Code Execution Vulnerability

  43. 7.8CVE-2023-21756EPSS 0.4%

    Windows Win32k Elevation of Privilege Vulnerability

  44. 7.8CVE-2023-3269EPSS 1.3%

    A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploi…

  45. 8.0CVE-2023-1902EPSS 0.6%

    The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS…

  46. 9.1CVE-2021-32495EPSS 0.8%

    Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

  47. 7.5CVE-2021-33796EPSS 0.7%

    In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.

  48. 9.8CVE-2023-29824EPSS 1.3%

    A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

  49. 5.5CVE-2023-37454EPSS 0.4%

    An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a diffe…

  50. 9.8CVE-2022-48512EPSS 0.5%

    Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.