CWE-416: Use After Free, page 139

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

1. 7.0CVE-2021-4083EPSS 0.3%2022-01-18

   A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a …

2. 7.5CVE-2021-46170EPSS 1.2%2022-01-14

   An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.

3. 5.5CVE-2021-46169EPSS 0.7%2022-01-14

   Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.

4. 5.5CVE-2021-46022EPSS 1.0%2022-01-14

   An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

5. 5.5CVE-2021-46021EPSS 0.9%2022-01-14

   An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

6. 7.8CVE-2021-45064EPSS 12%2022-01-14

   Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

7. 5.5CVE-2021-45063EPSS 6.2%2022-01-14

   Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensi…

8. 7.8CVE-2021-45062EPSS 16%2022-01-14

   Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

9. 5.5CVE-2021-45051EPSS 2.7%2022-01-14

   Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverag…

10. 5.5CVE-2021-44713EPSS 2.8%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denia…

11. 7.8CVE-2021-44710EPSS 12%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

12. 7.8CVE-2021-44706EPSS 8.7%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

13. 7.8CVE-2021-44705EPSS 7.4%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

14. 7.8CVE-2021-44704EPSS 11%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

15. 7.8CVE-2021-44701EPSS 21%2022-01-14

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code ex…

16. 7.8CVE-2021-39681EPSS 0.1%2022-01-14

    In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit…

17. 7.0CVE-2021-39679EPSS 0.09%2022-01-14

    In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…

18. 7.8CVE-2021-39634EPSS 0.3%2022-01-14

    In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kerne…

19. 7.0CVE-2021-39629EPSS 0.09%2022-01-14

    In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

20. 7.8CVE-2021-39620EPSS 0.1%2022-01-14

    In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…

21. 7.8CVE-2021-34939EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

22. 7.8CVE-2021-34937EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

23. 7.8CVE-2021-34936EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

24. 7.8CVE-2021-34933EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

25. 7.8CVE-2021-34931EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

26. 7.8CVE-2021-34922EPSS 1.9%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

27. 7.8CVE-2021-34919EPSS 2.0%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

28. 7.8CVE-2021-34917EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

29. 7.8CVE-2021-34911EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

30. 7.8CVE-2021-34909EPSS 2.0%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

31. 7.8CVE-2021-34908EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

32. 7.8CVE-2021-34906EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

33. 7.8CVE-2021-34895EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

34. 7.8CVE-2021-34894EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

35. 7.8CVE-2021-34891EPSS 2.1%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

36. 3.3CVE-2021-34886EPSS 1.6%2022-01-13

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or…

37. 3.3CVE-2021-34884EPSS 1.6%2022-01-13

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or…

38. 7.8CVE-2021-34879EPSS 2.0%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

39. 7.8CVE-2021-34872EPSS 2.0%2022-01-13

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

40. 3.3CVE-2021-45059EPSS 1.5%2022-01-13

    Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigat…

41. 5.5CVE-2021-45054EPSS 2.0%2022-01-13

    Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigatio…

42. 6.4CVE-2021-30313EPSS 0.1%2022-01-13

    Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

43. 5.5CVE-2021-40566EPSS 0.8%2022-01-12

    A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which causes a denial of service.

44. 5.5CVE-2021-36408EPSS 0.8%2022-01-10

    An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.

45. 5.5CVE-2022-0156EPSS 1.7%2022-01-10

    vim is vulnerable to Use After Free

46. 5.5CVE-2021-46142EPSS 1.2%2022-01-06

    An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.

47. 5.5CVE-2021-46141EPSS 1.2%2022-01-06

    An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.

48. 5.5CVE-2021-41043EPSS 0.9%2022-01-05

    Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.

49. 7.8CVE-2021-30337EPSS 0.2%2022-01-03

    Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap…

50. 7.8CVE-2021-30262EPSS 0.1%2022-01-03

    Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…