cve.bz

CWE-416: Use After Free, page 125

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-21601EPSS 0.4%

    Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of…

  2. 7.8CVE-2023-0358EPSS 0.4%

    Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV.

  3. 7.1CVE-2022-41858EPSS 0.3%

    A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal ke…

  4. 8.8CVE-2022-46891EPSS 0.8%

    An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifro…

  5. 5.5CVE-2023-21598EPSS 0.4%

    Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR…

  6. 5.9CVE-2023-22402EPSS 0.5%

    A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). In a Non Stop Routing (NSR) scenario, an unexpected kernel restart migh…

  7. 7.8CVE-2022-3977EPSS 0.3%

    A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to …

  8. 7.8CVE-2022-4696EPSS 0.4%

    There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won't use current->nsproxy, so …

  9. 7.8CVE-2023-21784EPSS 1.0%

    3D Builder Remote Code Execution Vulnerability

  10. 7.8CVE-2023-21774EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  11. 7.8CVE-2023-21773EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  12. 7.8CVE-2023-21755EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  13. 7.8CVE-2023-21747EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  14. 7.8CVE-2023-21735EPSS 0.7%

    Microsoft Office Remote Code Execution Vulnerability

  15. 7.8CVE-2023-21734EPSS 0.9%

    Microsoft Office Remote Code Execution Vulnerability

  16. 7.8CVE-2023-21724EPSS 0.5%

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

  17. 7.8CVE-2023-21680EPSS 0.5%

    Windows Win32k Elevation of Privilege Vulnerability

  18. 8.1CVE-2023-21679EPSS 1.1%

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  19. 8.8CVE-2023-21674KEVEPSS 34%

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  20. 7.8CVE-2023-21552EPSS 3.5%

    Windows GDI Elevation of Privilege Vulnerability

  21. 7.8CVE-2023-21551EPSS 0.4%

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  22. 7.0CVE-2023-21532EPSS 0.5%

    Windows GDI Elevation of Privilege Vulnerability

  23. 6.4CVE-2022-4382EPSS 0.5%

    A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

  24. 7.5CVE-2022-4379EPSS 6.6%

    A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial

  25. 8.8CVE-2023-0135EPSS 0.5%

    Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium secu…

  26. 8.8CVE-2023-0134EPSS 0.5%

    Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium secu…

  27. 8.8CVE-2023-0128EPSS 0.6%

    Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chro…

  28. 5.5CVE-2022-25722EPSS 0.1%

    Information exposure in DSP services due to improper handling of freeing memory

  29. 7.8CVE-2022-47093EPSS 0.3%

    GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid

  30. 6.1CVE-2022-3863EPSS 0.5%

    Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrome security severity: High)

  31. 7.5CVE-2022-3842EPSS 18%

    Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  32. 8.8CVE-2022-2742EPSS 0.4%

    Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interact…

  33. 7.4CVE-2019-13768EPSS 0.9%

    Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High)

  34. 8.8CVE-2019-25085EPSS 0.8%

    A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the att…

  35. 5.5CVE-2022-47946EPSS 0.4%

    An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can oc…

  36. 9.8CVE-2022-47939EPSS 49%

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.

  37. 9.8CVE-2022-46882EPSS 1.0%

    A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thunderbird < 102.6.

  38. 6.5CVE-2022-46880EPSS 0.7%

    A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included…

  39. 8.8CVE-2022-45409EPSS 0.8%

    The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Fire…

  40. 7.5CVE-2022-45407EPSS 0.7%

    If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

  41. 9.8CVE-2022-45406EPSS 1.1%

    If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This v…

  42. 6.5CVE-2022-45405EPSS 0.7%

    Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 10…

  43. 6.5CVE-2022-40960EPSS 1.1%

    Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.

  44. 7.5CVE-2022-38476EPSS 0.9%

    A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firef…

  45. 8.8CVE-2022-34484EPSS 1.0%

    The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitra…

  46. 9.8CVE-2022-34470EPSS 1.1%

    Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

  47. 9.8CVE-2022-31747EPSS 0.9%

    Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with…

  48. 6.5CVE-2022-28282EPSS 2.2%

    By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potential exploitable…

  49. 9.6CVE-2022-26486KEVEPSS 2.4%

    An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.…

  50. 8.8CVE-2022-26485KEVEPSS 14%

    Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for And…