VYPR

CWE-416

Use After Free

VariantStableLikelihood: High

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (8,192)

page 190 of 410
  • CVE-2024-49530HigDec 10, 2024
    Adobe Inc.
    Acrobat
    risk 0.51cvss 7.8epss 0.00

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…

  • CVE-2024-53143HigDec 7, 2024
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensure the superblock…

  • CVE-2024-11155HigDec 5, 2024
    Rockwellautomation
    Arena
    risk 0.51cvss 7.8epss 0.00

    A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to…

  • CVE-2024-53139HigDec 4, 2024
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctp_v6_available() A lockdep report [1] with CONFIG_PROVE_RCU_LIST=y hints that sctp_v6_available() is calling dev_get_by_index_rcu() and ipv6_chk_addr() without holding rcu. [1] …

  • CVE-2024-53103HigDec 2, 2024
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangling pointer. This…

  • CVE-2018-11816HigNov 26, 2024
    Qualcomm
    MediaServer
    risk 0.51cvss 7.8epss 0.00

    Crafted Binder Request Causes Heap UAF in MediaServer

  • CVE-2024-9255HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.01

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9252HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9251HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9250HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.01

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9243HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-7510HigNov 22, 2024
    Trimble
    Sketchup
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-9764HigNov 22, 2024
    Tungstenautomation
    Power PDF
    risk 0.51cvss 7.8epss 0.00

    Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this…

  • CVE-2024-9748HigNov 22, 2024
    Tungstenautomation
    Power PDF
    risk 0.51cvss 7.8epss 0.00

    Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this…

  • CVE-2024-9732HigNov 22, 2024
    Tungstenautomation
    Power PDF
    risk 0.51cvss 7.8epss 0.00

    Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this…

  • CVE-2024-9729HigNov 22, 2024
    Trimble
    Sketchup
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

  • CVE-2024-9728HigNov 22, 2024
    Trimble
    Sketchup Viewer
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

  • CVE-2024-9727HigNov 22, 2024
    Trimble
    Sketchup Viewer
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

  • CVE-2024-9725HigNov 22, 2024
    Trimble
    Sketchup Viewer
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

  • CVE-2024-9724HigNov 22, 2024
    Trimble
    Sketchup Viewer
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…