CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,218)
page 145 of 411| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-32929 | Hig | 0.53 | 8.1 | 0.00 | Jun 13, 2024 | In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2024-5688 | Hig | 0.53 | 8.1 | 0.01 | Jun 11, 2024 | If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. | ||
| CVE-2024-26230 | Hig | 0.53 | 7.8 | 0.24 | Apr 9, 2024 | Windows Telephony Server Elevation of Privilege Vulnerability | ||
| CVE-2024-2612 | Hig | 0.53 | 8.1 | 0.01 | Mar 19, 2024 | If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. | ||
| CVE-2021-47131 | Hig | 0.53 | 8.1 | 0.01 | Mar 15, 2024 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev with active TLS offload goes down, tls_device_down is called to stop the offload and tear down the TLS context. However, the… | ||
| CVE-2024-24794 | Hig | 0.53 | 8.1 | 0.01 | Feb 20, 2024 | A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the… | ||
| CVE-2024-24793 | Hig | 0.53 | 8.1 | 0.01 | Feb 20, 2024 | A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the… | ||
| CVE-2024-21860 | Hig | 0.53 | 8.2 | 0.00 | Feb 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free. | ||
| CVE-2023-41774 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41773 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41771 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41770 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41769 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41768 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41767 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-41765 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-38166 | Hig | 0.53 | 8.1 | 0.01 | Oct 10, 2023 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-3297 | Hig | 0.53 | 8.1 | 0.00 | Sep 1, 2023 | In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process. | ||
| CVE-2023-20893 | Hig | 0.53 | 8.1 | 0.01 | Jun 22, 2023 | The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server. | ||
| CVE-2022-48434 | Hig | 0.53 | 8.1 | 0.02 | Mar 29, 2023 | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a… |
- risk 0.53cvss 8.1epss 0.00
In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.53cvss 8.1epss 0.01
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
- risk 0.53cvss 7.8epss 0.24
Windows Telephony Server Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.01
If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
- risk 0.53cvss 8.1epss 0.01
In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev with active TLS offload goes down, tls_device_down is called to stop the offload and tear down the TLS context. However, the…
- risk 0.53cvss 8.1epss 0.01
A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the…
- risk 0.53cvss 8.1epss 0.01
A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the…
- risk 0.53cvss 8.2epss 0.00
in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.00
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
- risk 0.53cvss 8.1epss 0.01
The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.
- risk 0.53cvss 8.1epss 0.02
libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a…