cve.bz

CWE-416: Use After Free, page 77

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-50005EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout When the pn532 uart device is detaching, the pn532_uart_remove() is called. But there are no functions in…

  2. 5.5CVE-2022-50000EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1) …

  3. 7.8CVE-2022-49995EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdi_unregister gets called to stop further writeback and wait for associated delayed work t…

  4. 7.8CVE-2022-49980EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usb_udc_uevent() The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that can cause a use-af…

  5. 4.7CVE-2022-49968EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroy_workqueue call There is a possible race condition (use-after-free) like below (FREE) | (USE) adf7242_remove …

  6. 7.8CVE-2022-49956EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs _Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl() functions don't do anything except free the "pcmd" pointer…

  7. 7.8CVE-2022-49951EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix use-after-free during unregister In the following code within firmware_upload_unregister(), the call to device_unregister() could result in the dev_…

  8. 7.0CVE-2022-49939EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref->proc caused by race condition A transaction of type BINDER_TYPE_WEAK_HANDLE can fail to increment the reference for a node. In this case, the tar…

  9. 7.8CVE-2022-49935EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence to a dma_resv object we always assumed the the newer than all the existing fenc…

  10. 7.8CVE-2022-49934EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211_scan_rx() ieee80211_scan_rx() tries to access scan_req->flags after a null check, but a UAF is observed when the scan is completed a…

  11. 7.8CVE-2025-38076EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module gets unloaded it checks whether any of its tags are still in use and if so, we keep the mem…

  12. 7.8CVE-2025-38056EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hda_generic_machine_select() appends -idisp to the tplg filename by allocating a new string with devm_kasprintf(), t…

  13. 7.8CVE-2025-38052EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: ================================…

  14. 7.0CVE-2025-38051EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the readdir concurrency process, which may access the rsp buffer after it has been relea…

  15. 7.8CVE-2025-38024EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x7d/0xa0 lib/dump_stack.c…

  16. 7.8CVE-2025-38022EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/du…

  17. 7.8CVE-2025-38019EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices The driver only offloads neighbors that are constructed on top of net devices registered by it o…

  18. 5.7CVE-2025-46710EPSS 0.2%

    Possible kernel exceptions caused by reading and writing kernel heap data after free.

  19. 1.9CVE-2025-6119EPSS 0.2%

    A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of …

  20. 2.1CVE-2025-5991EPSS 0.1%

    There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream…

  21. 8.8CVE-2025-5958EPSS 0.4%

    Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 7.8CVE-2025-43577EPSS 0.5%

    Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

  23. 7.8CVE-2025-43576EPSS 0.5%

    Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

  24. 7.8CVE-2025-43574EPSS 0.4%

    Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

  25. 7.8CVE-2025-43573EPSS 0.4%

    Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

  26. 7.8CVE-2025-43550EPSS 0.5%

    Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

  27. 8.4CVE-2025-47957ExploitEPSS 1.3%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2025-47175ExploitEPSS 2.4%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2025-47170EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2025-47168EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2025-47165ExploitEPSS 2.2%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  32. 8.4CVE-2025-47164EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  33. 5.5CVE-2025-47106EPSS 0.3%

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl…

  34. 7.8CVE-2025-43589EPSS 0.3%

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…

  35. 8.1CVE-2025-33071EPSS 23%

    Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

  36. 7.8CVE-2025-32712EPSS 0.5%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  37. 8.1CVE-2025-32710EPSS 1.1%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  38. 7.8CVE-2025-38000EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the child qdisc's peek() opera…

  39. 2.0CVE-2025-5644EPSS 0.2%

    A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads…

  40. 6.5CVE-2025-23106EPSS 0.3%

    An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation.

  41. 6.5CVE-2025-23101EPSS 0.3%

    An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privilege escalation.

  42. 7.8CVE-2025-23098EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege escalation.

  43. 7.5CVE-2025-27038KEVEPSS 1.0%

    Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

  44. 7.8CVE-2025-27031EPSS 0.1%

    memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

  45. 6.6CVE-2024-53015EPSS 0.10%

    Memory corruption while processing IOCTL command to handle buffers associated with a session.

  46. 8.8CVE-2025-5068EPSS 3.3%

    Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  47. 6.5CVE-2025-23104EPSS 0.3%

    An issue was discovered in Samsung Mobile Processor Exynos 2200. A Use-After-Free in the mobile processor leads to privilege escalation.

  48. 7.8CVE-2025-5036EPSS 0.2%

    A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in th…

  49. 7.8CVE-2025-0819EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

  50. 7.8CVE-2025-0073EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already…