cve.bz

CWE-416: Use After Free, page 86

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-45571EPSS 0.1%

    Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

  2. 7.8CVE-2024-45561EPSS 0.1%

    Memory corruption while handling IOCTL call from user-space to set latency level.

  3. 7.8CVE-2024-38412EPSS 0.1%

    Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

  4. 7.8CVE-2024-38411EPSS 0.1%

    Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

  5. 7.8CVE-2025-0015EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GPU processing operations to gain access to already freed mem…

  6. 7.8CVE-2025-21671EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_fr…

  7. 7.8CVE-2024-47899EPSS 0.2%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  8. 7.8CVE-2024-47898EPSS 0.2%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  9. 7.8CVE-2024-47891EPSS 0.2%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  10. 8.8CVE-2025-0762EPSS 0.3%

    Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)

  11. 8.4CVE-2024-40670EPSS 0.08%

    In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  12. 8.4CVE-2024-40669EPSS 0.08%

    In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  13. 8.4CVE-2024-40651EPSS 0.09%

    In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitat…

  14. 8.4CVE-2024-40649EPSS 0.09%

    In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitat…

  15. 8.4CVE-2024-34748EPSS 0.09%

    In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User intera…

  16. 5.5CVE-2024-0147EPSS 0.2%

    NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering.

  17. 10.0CVE-2025-24085KEVExploitEPSS 17%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A m…

  18. 8.8CVE-2024-54499EPSS 0.6%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may lead to arbitrary …

  19. 7.8CVE-2022-49043EPSS 0.3%

    xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

  20. 4.7CVE-2025-21655EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_signal() is invoked from an RCU callback, but when dropping the reference to the io_…

  21. 7.8CVE-2024-57926EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err The pointer need to be set to NULL, otherwise KASAN complains about use-after-free…

  22. 7.8CVE-2025-21652EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink(). syzbot presented an use-after-free report [0] regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lo…

  23. 7.8CVE-2025-21631EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfq_init_rq+0x175d/0x17a0 block/…

  24. 7.8CVE-2024-57900EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_mapping() [1] commit 031ae72825ce ("ila: call nf_unregister_net_hooks() sooner") attempte…

  25. 7.8CVE-2024-57896EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During the unmount path, at close_ctree(), we first stop the cleaner kthread, using kt…

  26. 7.8CVE-2024-57892EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses…

  27. 7.8CVE-2024-57887EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the sam…

  28. 7.8CVE-2024-57857EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not manage a per device direct link to net_device. Rely on associated ib_devices net_device management, not doubling the ef…

  29. 7.8CVE-2024-57801EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is…

  30. 7.8CVE-2024-57795EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also occurred in …

  31. 7.8CVE-2025-21372EPSS 0.4%

    Microsoft Brokering File System Elevation of Privilege Vulnerability

  32. 7.8CVE-2025-21366EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  33. 8.4CVE-2025-21362EPSS 0.9%

    Microsoft Excel Remote Code Execution Vulnerability

  34. 7.8CVE-2025-21345EPSS 0.6%

    Microsoft Office Visio Remote Code Execution Vulnerability

  35. 7.8CVE-2025-21335KEVEPSS 1.4%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  36. 7.8CVE-2025-21334KEVEPSS 1.6%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  37. 7.8CVE-2025-21315EPSS 0.7%

    Microsoft Brokering File System Elevation of Privilege Vulnerability

  38. 9.8CVE-2025-21307EPSS 1.9%

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  39. 7.8CVE-2025-21304EPSS 0.6%

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

  40. 9.8CVE-2025-21298EPSS 74%

    Windows OLE Remote Code Execution Vulnerability

  41. 8.1CVE-2025-21297EPSS 1.5%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  42. 7.5CVE-2025-21296EPSS 0.8%

    BranchCache Remote Code Execution Vulnerability

  43. 8.1CVE-2025-21295EPSS 1.6%

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

  44. 7.8CVE-2025-21281EPSS 0.6%

    Microsoft COM for Windows Elevation of Privilege Vulnerability

  45. 8.1CVE-2025-21224EPSS 1.9%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  46. 5.5CVE-2024-57875EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when…

  47. 7.8CVE-2024-57849EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHP_AP_PERF_S390_SF_ONLINE --> …

  48. 7.8CVE-2024-57798EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), th…

  49. 7.8CVE-2024-50051EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. w…

  50. 7.8CVE-2024-41149EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cpuhp callback list If the 'hctx' isn't removed from cpuhp callback list, we can't reuse it, otherwise use-after-free may b…