cve.bz

CWE-416: Use After Free, page 93

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2024-8376EPSS 0.7%

    In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

  2. 5.5CVE-2024-47666EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RES…

  3. 7.8CVE-2024-45138EPSS 0.4%

    Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…

  4. 9.8CVE-2024-9680KEVEPSS 23%

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.…

  5. 7.8CVE-2024-47418EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  6. 7.8CVE-2024-47415EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  7. 7.8CVE-2024-47414EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  8. 7.8CVE-2024-47413EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  9. 7.8CVE-2024-47412EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  10. 7.8CVE-2024-45146EPSS 0.4%

    Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

  11. 8.8CVE-2024-43599EPSS 1.4%

    Remote Desktop Client Remote Code Execution Vulnerability

  12. 8.1CVE-2024-43582EPSS 3.2%

    Remote Desktop Protocol Server Remote Code Execution Vulnerability

  13. 8.3CVE-2024-43574EPSS 1.2%

    Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

  14. 7.0CVE-2024-43570EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  15. 7.8CVE-2024-43556EPSS 0.7%

    Windows Graphics Component Elevation of Privilege Vulnerability

  16. 7.3CVE-2024-43552EPSS 0.8%

    Windows Shell Remote Code Execution Vulnerability

  17. 7.0CVE-2024-43535EPSS 0.5%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  18. 8.8CVE-2024-43533EPSS 1.6%

    Remote Desktop Client Remote Code Execution Vulnerability

  19. 7.8CVE-2024-43509EPSS 0.6%

    Windows Graphics Component Elevation of Privilege Vulnerability

  20. 7.8CVE-2024-43504EPSS 6.5%

    Microsoft Excel Remote Code Execution Vulnerability

  21. 8.1CVE-2024-38229EPSS 2.1%

    .NET and Visual Studio Remote Code Execution Vulnerability

  22. 7.8CVE-2024-8422EPSS 0.2%

    CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.

  23. 6.7CVE-2024-39831EPSS 0.2%

    in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.

  24. 4.7CVE-2024-47814EPSS 0.3%

    Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the s…

  25. 8.1CVE-2024-44068EPSS 1.0%

    An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free in the mobile processor leads to privilege escalation.

  26. 7.8CVE-2024-43047KEVEPSS 0.7%

    Memory corruption while maintaining memory maps of HLOS memory.

  27. 7.8CVE-2024-38399EPSS 0.2%

    Memory corruption while processing user packets to generate page faults.

  28. 7.5CVE-2024-33069EPSS 0.4%

    Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.

  29. 6.7CVE-2024-23376EPSS 0.1%

    Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.

  30. 6.7CVE-2024-23370EPSS 0.1%

    Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

  31. 3.3CVE-2024-0124EPSS 0.2%

    NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability mig…

  32. 8.8CVE-2024-28888EPSS 2.2%

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory cor…

  33. 7.8CVE-2024-7675EPSS 0.2%

    A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current pr…

  34. 8.8CVE-2024-23923EPSS 0.8%

    Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not re…

  35. 7.0CVE-2024-46858EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== …

  36. 7.8CVE-2024-46849EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer 'card->dai_link' is reallocated in 'meson_card_reallocate_links()', so move 'pad' pointer initialization after this fu…

  37. 7.8CVE-2024-46845EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat tracer can use user space threads to check for osnoise and timer latency. If the program using this i…

  38. 5.5CVE-2024-46842EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted …

  39. 7.8CVE-2024-46831EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

  40. 8.8CVE-2024-9120EPSS 0.5%

    Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  41. 8.8CVE-2021-38023EPSS 0.3%

    Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  42. 5.7CVE-2024-8375EPSS 0.1%

    There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the…

  43. 7.8CVE-2024-46800EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN. The packet is dropped but qdis…

  44. 7.8CVE-2024-46798EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the following extra config, - CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INL…

  45. 7.8CVE-2024-46796EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_op() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable…

  46. 7.8CVE-2024-46786EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cookie_lru_timer is initialized when the fscache module is inserted, but is not dele…

  47. 7.8CVE-2024-46782EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_input [1] Issue here is that ila_xlat_exit_net() frees the rhashtable, then cal…

  48. 5.5CVE-2024-46781EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine for mount-time recovery, KASAN found a use-after-free bug. It turned o…

  49. 5.5CVE-2024-46762EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). If that ha…

  50. 7.8CVE-2024-46746EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't called anymore once hid_destroy_device() has been called. Hence, hid driver_data s…