cve.bz

CWE-416: Use After Free, page 94

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-46740EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied individually into the target buffer during transactions. Any raw data in-between thes…

  2. 7.8CVE-2024-46738EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is perf…

  3. 5.5CVE-2024-46716EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor Remove list_del call in msgdma_chan_desc_cleanup, this should be the role of msgdma_free_des…

  4. 6.3CVE-2024-8947EPSS 1.0%

    A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched r…

  5. 7.8CVE-2024-43758EPSS 0.3%

    Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v…

  6. 7.8CVE-2024-41869EPSS 2.4%

    Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi…

  7. 5.5CVE-2024-39385EPSS 0.3%

    Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…

  8. 7.8CVE-2024-46696EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.

  9. 7.8CVE-2024-46687EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() [BUG] There is an internal report that KASAN is reporting use-after-free, with the following …

  10. 7.8CVE-2024-46683EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of the queue, therefore in the current design anything locking the fence should then also hold a ref to t…

  11. 7.8CVE-2024-46674EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never performs any paltform device allocation, thus error path "undo_platform_…

  12. 5.5CVE-2024-45016EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() introduced by commit 5845f706388a ("net: netem: fix skb length BUG_ON in __skb_to_sg…

  13. 5.5CVE-2024-45013EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd ("nvme: start keep-alive after admin queue setup") moves starting keep-alive from nvme_start_c…

  14. 8.8CVE-2024-8639EPSS 0.4%

    Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  15. 8.8CVE-2024-8638EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

  16. 8.8CVE-2024-8637EPSS 0.5%

    Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  17. 8.8CVE-2024-8636EPSS 0.6%

    Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  18. 7.0CVE-2024-23716EPSS 0.07%

    In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not …

  19. 9.8CVE-2024-43491EPSS 13%

    Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker co…

  20. 7.8CVE-2024-43465EPSS 0.8%

    Microsoft Excel Elevation of Privilege Vulnerability

  21. 7.8CVE-2024-43463EPSS 0.9%

    Microsoft Office Visio Remote Code Execution Vulnerability

  22. 8.8CVE-2024-38259EPSS 1.9%

    Microsoft Management Console Remote Code Execution Vulnerability

  23. 7.8CVE-2024-38253EPSS 0.6%

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  24. 7.8CVE-2024-38252EPSS 0.6%

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  25. 7.8CVE-2024-38249EPSS 0.9%

    Windows Graphics Component Elevation of Privilege Vulnerability

  26. 7.0CVE-2024-38248EPSS 0.6%

    Windows Storage Elevation of Privilege Vulnerability

  27. 6.5CVE-2024-38235EPSS 0.7%

    Windows Hyper-V Denial of Service Vulnerability

  28. 7.5CVE-2024-38119EPSS 0.8%

    Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

  29. 8.8CVE-2024-26186EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  30. 7.8CVE-2024-31960EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.

  31. 6.5CVE-2024-8394EPSS 0.3%

    When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

  32. 5.5CVE-2024-45107EPSS 0.3%

    Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to b…

  33. 8.8CVE-2024-45063EPSS 0.5%

    The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achiev…

  34. 10.0CVE-2024-43102EPSS 0.7%

    Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be fre…

  35. 7.8CVE-2024-44998EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after calling vcc->push() because the skb is released.

  36. 7.8CVE-2024-44997EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() When there are multiple ap interfaces on one band and with WED on, turning the interface …

  37. 7.8CVE-2024-44987EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After ip6_local_out() has returned, we no longer can safely dereference rt, unless we h…

  38. 7.8CVE-2024-44986EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold…

  39. 7.8CVE-2024-44985EPSS 0.9%

    In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been freed and the associated dst/idev could also have been freed. We must use rcu_r…

  40. 7.8CVE-2024-44978EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job depends on job->vm being valid, the last xe_exec_queue_put can destroy the VM. Prevent UAF by freeing job before xe_ex…

  41. 7.8CVE-2024-44974EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and select_signal_address() both select an endpoint entry from the list inside an RCU protected …

  42. 7.8CVE-2024-44964EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit introduced a UAF, as it removed restoring q_vector->vport pointers after reinit…

  43. 8.8CVE-2024-8362EPSS 0.6%

    Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  44. 9.8CVE-2024-8384EPSS 0.7%

    The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox E…

  45. 7.8CVE-2024-3655EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations t…

  46. 7.8CVE-2024-38402EPSS 0.2%

    Memory corruption while processing IOCTL call for getting group info.

  47. 7.8CVE-2024-38401EPSS 0.1%

    Memory corruption while processing concurrent IOCTL calls.

  48. 7.8CVE-2024-33060EPSS 0.2%

    Memory corruption when two threads try to map and unmap a single node simultaneously.

  49. 8.4CVE-2024-23365EPSS 0.1%

    Memory corruption while releasing shared resources in MinkSocket listener thread.

  50. 7.8CVE-2024-41160EPSS 0.2%

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.