cve.bz

CWE-416: Use After Free, page 88

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-53218EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fs_stop_gc_thread In my test case, concurrent calls to f2fs shutdown report the following stack trace: Oops: general protection fault, p…

  2. 7.8CVE-2024-53216EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can be reduced to zero in `c_show` and `e_show`(using `rcu_read_lock` and `rcu_read…

  3. 7.8CVE-2024-53208EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync This fixes the following crash: ================================================================== BUG…

  4. 7.8CVE-2024-53206EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put(…

  5. 7.8CVE-2024-53194EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent Lenovo laptops with a USB4 dock. Since commit 0fc70886569c ("thunderbolt: Reset…

  6. 7.0CVE-2024-53186EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB request handling in `ksmbd_conn_handler_loop()` and the freeing of `ksmbd_conn` in …

  7. 5.5CVE-2024-53185EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 supports encryption negotiate context, so when SMB2_GLOBAL_CAP_ENCRYPTION flag is set i…

  8. 7.8CVE-2024-53182EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" This reverts commit bc3b1e9e7c50e1de0f573eea3871db61dd4787de. The bic is associated with …

  9. 7.8CVE-2024-53179EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following …

  10. 9.8CVE-2024-53177EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encounters an error parsing the lease from the server, the error handling may race wi…

  11. 7.8CVE-2024-53174EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefor…

  12. 7.8CVE-2024-53173EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort bef…

  13. 7.8CVE-2024-53171EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in TNC, the tree might split and cause a node to change its `znode->parent`. A furth…

  14. 7.8CVE-2024-53170EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not called during scsi probe, by checking blk_queue_init_done(). However, QUEUE_FLAG_…

  15. 7.8CVE-2024-53168EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0 Read of size 1 at addr ffff888111f322…

  16. 7.8CVE-2024-53166EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd->lock, however bfq_limit_depth() is …

  17. 7.8CVE-2024-53165EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would le…

  18. 8.5CVE-2024-12175EPSS 0.3%

    Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor…

  19. 9.8CVE-2021-32589EPSS 8.9%

    A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12…

  20. 7.8CVE-2022-44520EPSS 0.4%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user…

  21. 5.5CVE-2022-44519EPSS 0.3%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th…

  22. 7.8CVE-2022-44518EPSS 0.4%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user…

  23. 7.8CVE-2022-44514EPSS 0.4%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user…

  24. 8.8CVE-2024-12694EPSS 0.4%

    Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  25. 10.0CVE-2024-47040EPSS 0.2%

    There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  26. 8.8CVE-2024-49576EPSS 1.1%

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory…

  27. 8.8CVE-2024-47810EPSS 1.3%

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption …

  28. 7.8CVE-2024-47892EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  29. 7.8CVE-2024-46971EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  30. 7.8CVE-2024-49142EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  31. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  32. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  33. 8.1CVE-2024-49127EPSS 1.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  34. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  35. 8.1CVE-2024-49122EPSS 21%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  36. 8.1CVE-2024-49118EPSS 1.4%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  37. 8.1CVE-2024-49116EPSS 10%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  38. 8.1CVE-2024-49115EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  39. 8.1CVE-2024-49108EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  40. 8.1CVE-2024-49106EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  41. 7.0CVE-2024-49097EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  42. 7.8CVE-2024-49079EPSS 1.0%

    Input Method Editor (IME) Remote Code Execution Vulnerability

  43. 7.8CVE-2024-49074EPSS 0.6%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  44. 7.8CVE-2024-49069EPSS 1.2%

    Microsoft Excel Remote Code Execution Vulnerability

  45. 5.1CVE-2024-47834EPSS 0.9%

    GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GST_MATROSKA_ID_CODECPRIVAT…

  46. 8.8CVE-2024-12382EPSS 4.9%

    Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  47. 7.8CVE-2024-53953EPSS 0.5%

    Animate versions 23.0.8, 24.0.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  48. 7.8CVE-2024-52997EPSS 0.5%

    Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  49. 7.8CVE-2024-49530EPSS 0.5%

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo…

  50. 7.8CVE-2024-53143EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not a…