cve.bz

CWE-416: Use After Free, page 143

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2021-41536EPSS 1.2%

    A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in…

  2. 7.8CVE-2021-41535EPSS 1.6%

    A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while …

  3. 7.8CVE-2021-0612EPSS 0.1%

    In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue…

  4. 7.8CVE-2021-0611EPSS 0.1%

    In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue…

  5. 5.5CVE-2020-21913EPSS 1.2%

    International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

  6. 6.3CVE-2021-39216EPSS 0.3%

    Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passing `externref`s from the host to guest Wasm content. To trigger the bug, you have…

  7. 9.8CVE-2021-39228EPSS 1.3%

    Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using `patch` or `merge` on `state` and assign the result back to `state…

  8. 9.8CVE-2021-1976EPSS 0.8%

    A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, …

  9. 7.8CVE-2021-1947EPSS 0.2%

    Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructur…

  10. 7.3CVE-2021-3796EPSS 1.7%

    vim is vulnerable to Use After Free

  11. 7.8CVE-2021-38656EPSS 6.7%

    Microsoft Word Remote Code Execution Vulnerability

  12. 7.8CVE-2021-38655EPSS 6.4%

    Microsoft Excel Remote Code Execution Vulnerability

  13. 7.8CVE-2021-37202EPSS 0.9%

    A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsi…

  14. 6.7CVE-2021-1963EPSS 0.1%

    Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap…

  15. 7.8CVE-2021-30683EPSS 1.0%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application could execute arbitrary code leadi…

  16. 8.8CVE-2021-30661KEVEPSS 4.5%

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead…

  17. 8.8CVE-2021-1876EPSS 1.3%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arb…

  18. 9.8CVE-2021-1864EPSS 2.2%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.

  19. 8.8CVE-2021-30802EPSS 1.3%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

  20. 8.8CVE-2021-30795EPSS 2.2%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code executi…

  21. 8.8CVE-2021-30762KEVEPSS 11%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have b…

  22. 7.1CVE-2021-30741EPSS 0.8%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.

  23. 8.8CVE-2021-30624EPSS 4.1%

    Chromium: CVE-2021-30624 Use after free in Autofill

  24. 8.8CVE-2021-30623EPSS 4.0%

    Chromium: CVE-2021-30623 Use after free in Bookmarks

  25. 8.8CVE-2021-30622EPSS 4.1%

    Chromium: CVE-2021-30622 Use after free in WebApp Installs

  26. 8.8CVE-2021-30616EPSS 4.1%

    Chromium: CVE-2021-30616 Use after free in Media

  27. 8.8CVE-2021-30613EPSS 4.1%

    Chromium: CVE-2021-30613 Use after free in Base internals

  28. 8.8CVE-2021-30612EPSS 2.8%

    Chromium: CVE-2021-30612 Use after free in WebRTC

  29. 8.8CVE-2021-30611EPSS 2.8%

    Chromium: CVE-2021-30611 Use after free in WebRTC

  30. 8.8CVE-2021-30610EPSS 4.1%

    Chromium: CVE-2021-30610 Use after free in Extensions API

  31. 8.8CVE-2021-30609EPSS 4.1%

    Chromium: CVE-2021-30609 Use after free in Sign-In

  32. 8.8CVE-2021-30608EPSS 4.1%

    Chromium: CVE-2021-30608 Use after free in Web Share

  33. 8.8CVE-2021-30607EPSS 4.1%

    Chromium: CVE-2021-30607 Use after free in Permissions

  34. 8.8CVE-2021-30606EPSS 4.1%

    Chromium: CVE-2021-30606 Use after free in Blink

  35. 8.8CVE-2021-28553EPSS 3.5%

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability …

  36. 8.8CVE-2021-28550KEVEPSS 52%

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability t…

  37. 7.8CVE-2021-36055EPSS 2.7%

    XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v…

  38. 8.8CVE-2021-30604EPSS 2.5%

    Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  39. 8.8CVE-2021-30602EPSS 2.1%

    Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.

  40. 8.8CVE-2021-30601EPSS 1.9%

    Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

  41. 8.8CVE-2021-30600EPSS 2.5%

    Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

  42. 6.8CVE-2021-30597EPSS 1.3%

    Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.

  43. 6.8CVE-2021-30594EPSS 1.3%

    Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.

  44. 8.8CVE-2021-30591EPSS 2.5%

    Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  45. 7.5CVE-2021-32781EPSS 1.3%

    Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response dat…

  46. 7.8CVE-2021-30980EPSS 1.4%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may…

  47. 8.8CVE-2021-30951EPSS 2.0%

    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitra…

  48. 8.8CVE-2021-30936EPSS 2.0%

    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitra…

  49. 7.8CVE-2021-30927EPSS 0.4%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may…

  50. 7.8CVE-2021-30902EPSS 0.4%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code…