VYPR

CWE-416

Use After Free

VariantStableLikelihood: High

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (8,284)

page 19 of 415
  • CVE-2020-3749CriFeb 13, 2020
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2020-3746CriFeb 13, 2020
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2020-3745CriFeb 13, 2020
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2020-3743CriFeb 13, 2020
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

  • CVE-2020-8447CriJan 30, 2020
    Ossec
    Ossec
    risk 0.64cvss 9.8epss 0.02

    In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by…

  • CVE-2020-8444CriJan 30, 2020
    Ossec
    Ossec
    risk 0.64cvss 9.8epss 0.02

    In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by…

  • CVE-2019-8257CriJan 28, 2020
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead…

  • CVE-2019-10581CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables…

  • CVE-2020-6840CriJan 11, 2020
    Mruby
    Mruby
    risk 0.64cvss 9.8epss 0.02

    In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.

  • CVE-2020-6838CriJan 11, 2020
    Mruby
    Mruby
    risk 0.64cvss 9.8epss 0.01

    In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.

  • CVE-2019-19952CriDec 24, 2019
    ImageMagick
    Imagemagick
    risk 0.64cvss 9.8epss 0.02

    In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

  • CVE-2019-19950CriDec 24, 2019
    Graphicsmagick
    Graphicsmagick
    risk 0.64cvss 9.8epss 0.03

    In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.

  • CVE-2019-16464CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16459CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16452CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.06

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16448CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-16445CriDec 19, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code…

  • CVE-2019-2205CriNov 13, 2019
    Google
    Android
    risk 0.64cvss 9.8epss 0.03

    In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2019-18814CriNov 7, 2019
    Linux
    Kernel
    risk 0.64cvss 9.8epss 0.03

    An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.

  • CVE-2019-10528CriNov 6, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables…