cve.bz

CWE-416: Use After Free, page 120

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2023-33153EPSS 1.0%

    Microsoft Outlook Remote Code Execution Vulnerability

  2. 7.8CVE-2023-33149EPSS 0.6%

    Microsoft Office Graphics Remote Code Execution Vulnerability

  3. 6.7CVE-2023-32055EPSS 0.4%

    Active Template Library Elevation of Privilege Vulnerability

  4. 8.8CVE-2023-32038EPSS 1.2%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  5. 7.2CVE-2023-32033EPSS 0.9%

    Microsoft Failover Cluster Remote Code Execution Vulnerability

  6. 7.8CVE-2023-21756EPSS 0.4%

    Windows Win32k Elevation of Privilege Vulnerability

  7. 7.8CVE-2023-3269EPSS 1.3%

    A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploi…

  8. 8.0CVE-2023-1902EPSS 0.6%

    The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS…

  9. 9.1CVE-2021-32495EPSS 0.8%

    Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

  10. 7.5CVE-2021-33796EPSS 0.7%

    In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.

  11. 9.8CVE-2023-29824EPSS 1.3%

    A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

  12. 5.5CVE-2023-37454EPSS 0.4%

    An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a diffe…

  13. 9.8CVE-2022-48512EPSS 0.5%

    Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.

  14. 9.8CVE-2022-48511EPSS 0.5%

    Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.

  15. 9.8CVE-2021-46894EPSS 0.4%

    Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.

  16. 7.8CVE-2023-31248EPSS 1.9%

    Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

  17. 8.8CVE-2023-37209EPSS 0.6%

    A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that o…

  18. 8.8CVE-2023-37202EPSS 0.8%

    Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and …

  19. 8.8CVE-2023-37201EPSS 0.8%

    An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

  20. 7.8CVE-2023-21672EPSS 0.1%

    Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

  21. 4.7CVE-2023-3439EPSS 0.3%

    A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of th…

  22. 7.8CVE-2023-3390EPSS 0.9%

    A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causin…

  23. 7.8CVE-2023-3389EPSS 0.7%

    A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgradin…

  24. 7.8CVE-2023-21147EPSS 0.1%

    In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for …

  25. 6.7CVE-2023-21146EPSS 0.10%

    there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android …

  26. 7.8CVE-2023-25002EPSS 0.3%

    A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

  27. 7.8CVE-2023-25001EPSS 0.3%

    A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

  28. 8.8CVE-2023-3422EPSS 0.7%

    Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Hi…

  29. 8.8CVE-2023-3421EPSS 1.2%

    Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  30. 7.1CVE-2023-3317EPSS 0.2%

    A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'feat…

  31. 9.8CVE-2023-32412EPSS 1.6%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. A…

  32. 7.8CVE-2023-32398EPSS 0.2%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. A…

  33. 9.8CVE-2023-32387EPSS 1.7%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A remote attacker may be able to cause unexpected app termination or arbitrary co…

  34. 8.8CVE-2023-32373KEVEPSS 12%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted we…

  35. 9.8CVE-2022-22630EPSS 1.4%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-004 Catalina. A remote user may cause an unexpected app termination or arbitrary c…

  36. 7.1CVE-2023-34241EPSS 1.4%

    OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the conne…

  37. 9.8CVE-2023-20893EPSS 1.2%

    The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying oper…

  38. 7.5CVE-2023-1999EPSS 1.0%

    There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory…

  39. 7.5CVE-2023-25747EPSS 0.6%

    A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affect…

  40. 7.0CVE-2023-35829EPSS 0.4%

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.

  41. 7.0CVE-2023-35828EPSS 0.5%

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

  42. 7.0CVE-2023-35827EPSS 0.2%

    An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.

  43. 7.0CVE-2023-35826EPSS 0.2%

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.

  44. 7.0CVE-2023-35824EPSS 0.2%

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.

  45. 7.0CVE-2023-35823EPSS 0.2%

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

  46. 7.8CVE-2023-28287EPSS 0.7%

    Microsoft Publisher Remote Code Execution Vulnerability

  47. 9.8CVE-2023-35784EPSS 0.9%

    A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.

  48. 5.5CVE-2023-34475EPSS 0.4%

    A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowi…

  49. 7.8CVE-2023-34795EPSS 0.4%

    xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file.

  50. 7.8CVE-2023-29356EPSS 0.6%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability