CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,192)
page 266 of 410| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-33068 | Hig | 0.49 | 7.5 | 0.00 | Nov 4, 2024 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. | ||
| CVE-2024-10459 | Hig | 0.49 | 7.5 | 0.01 | Oct 29, 2024 | An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132. | ||
| CVE-2024-9960 | Hig | 0.49 | 7.5 | 0.00 | Oct 15, 2024 | Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-33069 | Hig | 0.49 | 7.5 | 0.00 | Oct 7, 2024 | Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. | ||
| CVE-2024-38119 | Hig | 0.49 | 7.5 | 0.01 | Sep 10, 2024 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability | ||
| CVE-2024-38138 | Hig | 0.49 | 7.5 | 0.02 | Aug 13, 2024 | Windows Deployment Services Remote Code Execution Vulnerability | ||
| CVE-2024-33010 | Hig | 0.49 | 7.5 | 0.00 | Aug 5, 2024 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. | ||
| CVE-2024-38078 | Hig | 0.49 | 7.5 | 0.01 | Jul 9, 2024 | Xbox Wireless Adapter Remote Code Execution Vulnerability | ||
| CVE-2024-30101 | Hig | 0.49 | 7.5 | 0.02 | Jun 11, 2024 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2024-5702 | Hig | 0.49 | 7.5 | 0.01 | Jun 11, 2024 | Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12. | ||
| CVE-2024-5694 | Hig | 0.49 | 7.5 | 0.00 | Jun 11, 2024 | An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127. | ||
| CVE-2024-36844 | Hig | 0.49 | 7.5 | 0.01 | May 31, 2024 | libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server. | ||
| CVE-2024-2410 | Hig | 0.49 | 7.6 | 0.00 | May 3, 2024 | The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed. | ||
| CVE-2024-3853 | Hig | 0.49 | 7.5 | 0.00 | Apr 16, 2024 | A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125. | ||
| CVE-2024-30416 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-30809 | Hig | 0.49 | 7.5 | 0.01 | Apr 2, 2024 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts. | ||
| CVE-2024-30807 | Hig | 0.49 | 7.5 | 0.01 | Apr 2, 2024 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts. | ||
| CVE-2024-2886 | Hig | 0.49 | 7.5 | 0.02 | Mar 26, 2024 | Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-26455 | Hig | 0.49 | 7.5 | 0.01 | Feb 26, 2024 | fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. | ||
| CVE-2024-24990 | Hig | 0.49 | 7.5 | 0.01 | Feb 14, 2024 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC… |
- risk 0.49cvss 7.5epss 0.00
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
- risk 0.49cvss 7.5epss 0.01
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.
- risk 0.49cvss 7.5epss 0.00
Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- risk 0.49cvss 7.5epss 0.00
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
- risk 0.49cvss 7.5epss 0.01
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Deployment Services Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.00
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
- risk 0.49cvss 7.5epss 0.01
Xbox Wireless Adapter Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Microsoft Office Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
- risk 0.49cvss 7.5epss 0.00
An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.
- risk 0.49cvss 7.5epss 0.01
libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.
- risk 0.49cvss 7.6epss 0.00
The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed.
- risk 0.49cvss 7.5epss 0.00
A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.
- risk 0.49cvss 7.5epss 0.00
Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.01
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
- risk 0.49cvss 7.5epss 0.01
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
- risk 0.49cvss 7.5epss 0.02
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
- risk 0.49cvss 7.5epss 0.01
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.
- risk 0.49cvss 7.5epss 0.01
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC…