cve.bz

CWE-416: Use After Free, page 66

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2025-14372EPSS 0.2%

    Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

  2. 1.9CVE-2025-14569EPSS 0.1%

    A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approa…

  3. 7.3CVE-2025-66585EPSS 0.2%

    In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the cur…

  4. 7.4CVE-2025-36934EPSS 0.10%

    In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…

  5. 6.7CVE-2025-36922EPSS 0.08%

    In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not need…

  6. 6.7CVE-2025-55309EPSS 0.1%

    An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-cl…

  7. 6.7CVE-2025-55308EPSS 0.1%

    An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects.…

  8. 7.0CVE-2025-62573EPSS 0.2%

    Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2025-62569EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  10. 7.3CVE-2025-62565EPSS 0.6%

    Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2025-62563EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  12. 7.8CVE-2025-62562EPSS 0.8%

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  13. 7.8CVE-2025-62559EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2025-62558EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  15. 7.8CVE-2025-62557EPSS 0.4%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  16. 7.0CVE-2025-62555EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  17. 7.8CVE-2025-62553EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  18. 7.8CVE-2025-62472EPSS 2.2%

    Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2025-62221KEVEPSS 2.5%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2025-66627EPSS 0.1%

    Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerabilit…

  21. 9.8CVE-2025-14326EPSS 0.5%

    Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.

  22. 9.8CVE-2025-14321EPSS 0.6%

    Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  23. 5.9CVE-2025-62408EPSS 0.4%

    c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

  24. 4.7CVE-2025-66326EPSS 0.07%

    Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.

  25. 6.1CVE-2025-65955EPSS 0.2%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with…

  26. 8.8CVE-2025-13638EPSS 0.3%

    Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

  27. 8.8CVE-2025-13633EPSS 0.5%

    Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: H…

  28. 6.7CVE-2025-20775EPSS 0.09%

    In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc…

  29. 6.7CVE-2025-20773EPSS 0.09%

    In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc…

  30. 6.7CVE-2025-20772EPSS 0.09%

    In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc…

  31. 6.7CVE-2025-20770EPSS 0.09%

    In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc…

  32. 6.5CVE-2025-65407EPSS 0.3%

    A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG Program stream.

  33. 6.5CVE-2025-65405EPSS 0.3%

    A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS/AAC file.

  34. 5.9CVE-2025-58408EPSS 0.1%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chose…

  35. 4.0CVE-2025-8045EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed …

  36. 5.1CVE-2025-6349EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already…

  37. 7.1CVE-2025-58311EPSS 0.09%

    UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

  38. 5.5CVE-2025-58307EPSS 0.09%

    UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

  39. 5.5CVE-2025-58303EPSS 0.08%

    UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

  40. 6.0CVE-2025-65953EPSS 0.2%

    NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.22.5, a Heap-Use-After-Free (UAF) vulnerability exists in the TCP transport component of NanoMQ, which relies on the underlying NanoNNG library (speci…

  41. 5.5CVE-2025-65503EPSS 0.2%

    Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between io_context and endpoint obje…

  42. 7.8CVE-2025-61662EPSS 0.2%

    A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this conditi…

  43. 8.0CVE-2025-48593EPSS 0.9%

    In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed f…

  44. 7.5CVE-2024-9126EPSS 0.3%

    Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromi…

  45. 1.9CVE-2025-13120EPSS 0.2%

    A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclose…

  46. 6.9CVE-2011-10034EPSS 0.6%

    AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The da…

  47. 7.8CVE-2025-11797EPSS 0.2%

    A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the conte…

  48. 7.8CVE-2025-40149EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). get_netdev_for_sock() is called during setsockopt(), so not under RCU. Using sk_dst_get(sk)->dev cou…

  49. 7.8CVE-2025-64531EPSS 0.2%

    Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…

  50. 7.8CVE-2025-61834EPSS 0.2%

    Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…