cve.bz

CWE-416: Use After Free, page 96

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2024-38199EPSS 2.2%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  2. 7.8CVE-2024-38193KEVExploitEPSS 29%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  3. 7.8CVE-2024-38171EPSS 0.9%

    Microsoft PowerPoint Remote Code Execution Vulnerability

  4. 9.1CVE-2024-38159EPSS 2.2%

    Windows Network Virtualization Remote Code Execution Vulnerability

  5. 7.0CVE-2024-38158EPSS 0.4%

    Azure IoT SDK Remote Code Execution Vulnerability

  6. 7.8CVE-2024-38150EPSS 3.7%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  7. 7.8CVE-2024-38147EPSS 3.3%

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

  8. 7.8CVE-2024-38141EPSS 3.7%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  9. 9.8CVE-2024-38140EPSS 3.8%

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  10. 7.5CVE-2024-38138EPSS 1.7%

    Windows Deployment Services Remote Code Execution Vulnerability

  11. 7.0CVE-2024-38137EPSS 0.4%

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

  12. 7.0CVE-2024-38136EPSS 0.4%

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

  13. 7.8CVE-2024-38107KEVEPSS 1.6%

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

  14. 5.5CVE-2024-42232EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly als…

  15. 8.8CVE-2024-7536EPSS 0.7%

    Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  16. 8.8CVE-2024-7533EPSS 0.7%

    Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  17. 8.8CVE-2024-7000EPSS 0.6%

    Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Med…

  18. 8.8CVE-2024-6998EPSS 0.6%

    Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security se…

  19. 8.8CVE-2024-6997EPSS 0.6%

    Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Me…

  20. 8.8CVE-2024-6991EPSS 0.6%

    Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  21. 8.8CVE-2024-6989EPSS 0.6%

    Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 8.8CVE-2024-6988EPSS 0.6%

    Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  23. 8.8CVE-2024-7530EPSS 0.4%

    Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

  24. 8.8CVE-2024-7528EPSS 0.5%

    Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

  25. 8.8CVE-2024-7527EPSS 0.6%

    Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

  26. 7.8CVE-2024-33034EPSS 0.1%

    Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

  27. 7.8CVE-2024-33028EPSS 0.1%

    Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

  28. 7.8CVE-2024-33023EPSS 0.1%

    Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

  29. 7.5CVE-2024-33010EPSS 0.3%

    Transient DOS while parsing fragments of MBSSID IE from beacon frame.

  30. 8.4CVE-2024-23384EPSS 0.1%

    Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

  31. 7.8CVE-2024-23383EPSS 0.1%

    Memory corruption when kernel driver attempts to trigger hardware fences.

  32. 7.8CVE-2024-23382EPSS 0.1%

    Memory corruption while processing graphics kernel driver request to create DMA fence.

  33. 7.8CVE-2024-23381EPSS 0.1%

    Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.

  34. 7.8CVE-2024-4607EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations t…

  35. 7.8CVE-2024-2937EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations t…

  36. 4.2CVE-2024-41965EPSS 0.3%

    Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim m…

  37. 7.8CVE-2024-42112EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free I…

  38. 5.5CVE-2024-42108EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll() The use-after-free is actually in rswitch_tx_free(), which is inlined in rswitch_poll(). Since `skb` and `gq->skbs[g…

  39. 7.8CVE-2024-42105EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related to reserved inodes". This series fixes one use-after-free issue reported by syz…

  40. 7.8CVE-2024-42104EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: add missing check for inode numbers on directory entries Syzbot reported that mounting and unmounting a specific pattern of corrupted nilfs2 filesystem images ca…

  41. 4.6CVE-2024-40829EPSS 0.8%

    The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view restricted content from the lock screen.

  42. 6.5CVE-2024-40782EPSS 1.0%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciou…

  43. 4.3CVE-2024-40776EPSS 1.0%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciou…

  44. 5.5CVE-2024-42075EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arena_vm_close.

  45. 5.5CVE-2024-42073EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems The following two shared buffer operations make use of the Shared Buffer Status Register (SBSR): …

  46. 7.8CVE-2024-41096EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG: KFENCE: use-after-free read in __pci_enable_msi_range+0x2c0/0x488 Use-after-free read …

  47. 7.8CVE-2024-41092EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915_selftest@live@hangcheck on ADL-P…

  48. 7.8CVE-2024-41074EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id < 0 in copen If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. An…

  49. 7.8CVE-2024-41070EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al reported a possible use-after-free (UAF) in kvm_spapr_tce_attach_iommu_group(). It looks up `s…

  50. 7.8CVE-2024-41069EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topology file, release memory used by it, so having pointer references directly into topology f…