cve.bz

CWE-416: Use After Free, page 99

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-48726EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit mentioned in the Fixes line to make sure that allocation and erasing multicast struc…

  2. 8.8CVE-2024-6103EPSS 0.6%

    Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  3. 7.8CVE-2021-47616EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init() qp->sq.queue is freed and then rxe_create_qp() will drop last reference to thi…

  4. 7.8CVE-2021-47614EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE info list. Add the chunk entry to the PBLE i…

  5. 7.8CVE-2021-47600EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalance_children() Move dm_tm_unlock() after dm_tm_dec().

  6. 7.8CVE-2021-47598EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzb…

  7. 7.8CVE-2021-47596EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acceletion engine dev…

  8. 7.8CVE-2021-47576EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() In resp_mode_select() sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-a…

  9. 7.0CVE-2024-38612EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fai…

  10. 7.8CVE-2024-38610EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() Patch series "mm: follow_pte() improvements and acrn follow_pte() fixes". Patch #1 fixes a bunch of issues…

  11. 7.8CVE-2024-38588EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BUG: KASAN: use-after-free in ftrace_location+0x90/0x120 Read of size 8 at addr …

  12. 7.8CVE-2024-38583EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-relat…

  13. 7.8CVE-2024-38581EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c

  14. 7.8CVE-2024-38570EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatica…

  15. 7.0CVE-2024-38561EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the deadline and before the call to kthread_stop(), which may lead to use after free.

  16. 7.8CVE-2024-38555EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state. Avoid calling completion h…

  17. 7.8CVE-2024-38545EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been releas…

  18. 6.3CVE-2024-38544EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whet…

  19. 7.8CVE-2024-36979EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be fr…

  20. 4.8CVE-2024-6064EPSS 0.3%

    A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmt_node_end of the file src/scene_manager/loader_xmt.c of the component MP4Box. The manipulat…

  21. 8.1CVE-2024-32929EPSS 0.2%

    In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  22. 7.8CVE-2024-32900EPSS 0.2%

    In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_camera_default SELinux label with no additional execution privileges needed. User i…

  23. 7.8CVE-2024-29787EPSS 0.08%

    In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

  24. 8.8CVE-2024-5847EPSS 0.5%

    Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

  25. 8.8CVE-2024-5846EPSS 0.5%

    Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

  26. 8.8CVE-2024-5845EPSS 0.5%

    Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

  27. 8.8CVE-2024-5842EPSS 0.5%

    Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security sever…

  28. 8.8CVE-2024-5841EPSS 5.0%

    Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  29. 8.8CVE-2024-5832EPSS 0.5%

    Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  30. 8.8CVE-2024-5831EPSS 0.5%

    Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  31. 7.3CVE-2024-30102EPSS 0.8%

    Microsoft Office Remote Code Execution Vulnerability

  32. 7.5CVE-2024-30101EPSS 1.8%

    Microsoft Office Remote Code Execution Vulnerability

  33. 7.8CVE-2024-30089EPSS 8.1%

    Microsoft Streaming Service Elevation of Privilege Vulnerability

  34. 7.8CVE-2024-30086EPSS 1.1%

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  35. 7.8CVE-2024-30082EPSS 1.3%

    Win32k Elevation of Privilege Vulnerability

  36. 9.8CVE-2024-30080EPSS 43%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  37. 7.8CVE-2024-30062EPSS 1.0%

    Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability

  38. 7.5CVE-2024-5702EPSS 0.9%

    Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.

  39. 7.5CVE-2024-5694EPSS 0.5%

    An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

  40. 8.1CVE-2024-5688EPSS 1.1%

    If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

  41. 7.8CVE-2024-36971KEVEPSS 2.7%

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules a…

  42. 8.4CVE-2024-32502EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper reference count checking, w…

  43. 7.8CVE-2024-32503EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checkin…

  44. 7.8CVE-2024-4610KEVEPSS 0.8%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue aff…

  45. 8.8CVE-2024-5269EPSS 1.2%

    Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authenticatio…

  46. 7.8CVE-2024-30375EPSS 0.5%

    Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is require…

  47. 5.9CVE-2024-34362EPSS 0.6%

    Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can crash Envoy. An attacker can exploit this vulnerability by sending a request with…

  48. 7.5CVE-2024-32974EPSS 0.7%

    Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers aft…

  49. 7.8CVE-2023-43544EPSS 0.1%

    Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

  50. 7.0CVE-2023-43543EPSS 0.09%

    Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.