CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,173)
page 357 of 409| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-56434 | Med | 0.29 | 4.4 | 0.00 | Jan 8, 2025 | UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. | ||
| CVE-2024-54030 | Med | 0.29 | 4.4 | 0.00 | Jan 7, 2025 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. | ||
| CVE-2024-42326 | Med | 0.29 | 4.4 | 0.00 | Nov 27, 2024 | There was discovered a use after free bug in browser.c in the es_browser_get_variant function | ||
| CVE-2024-39831 | Med | 0.29 | 4.4 | 0.00 | Oct 8, 2024 | in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free. | ||
| CVE-2024-8947 | Med | 0.29 | 5.6 | 0.01 | Sep 17, 2024 | A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is… | ||
| CVE-2023-52800 | Med | 0.29 | 4.4 | 0.00 | May 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark… | ||
| CVE-2024-23658 | Med | 0.29 | 4.4 | 0.00 | Apr 8, 2024 | In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2023-48353 | Med | 0.29 | 4.4 | 0.00 | Jan 18, 2024 | In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2020-27418 | Med | 0.29 | 4.4 | 0.00 | Aug 22, 2023 | A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. | ||
| CVE-2022-48386 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2023-21045 | Med | 0.29 | 4.4 | 0.00 | Mar 24, 2023 | When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… | ||
| CVE-2022-39853 | Med | 0.29 | 4.4 | 0.00 | Oct 7, 2022 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. | ||
| CVE-2022-36855 | Med | 0.29 | 4.4 | 0.00 | Sep 9, 2022 | A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. | ||
| CVE-2022-20035 | Med | 0.29 | 4.4 | 0.00 | Feb 9, 2022 | In vcu driver, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171675; Issue ID: ALPS06171675. | ||
| CVE-2021-1042 | Med | 0.29 | 4.4 | 0.00 | Dec 15, 2021 | In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-1114 | Med | 0.29 | 4.4 | 0.00 | Aug 11, 2021 | NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service. | ||
| CVE-2021-20227 | Med | 0.29 | 5.5 | 0.01 | Mar 23, 2021 | A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat… | ||
| CVE-2020-27835 | Med | 0.29 | 4.4 | 0.00 | Jan 7, 2021 | A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system. | ||
| CVE-2020-35923 | Med | 0.29 | 5.5 | 0.00 | Dec 31, 2020 | An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN. | ||
| CVE-2020-35917 | Med | 0.29 | 5.5 | 0.00 | Dec 31, 2020 | An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py>. |
- risk 0.29cvss 4.4epss 0.00
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.
- risk 0.29cvss 4.4epss 0.00
in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free.
- risk 0.29cvss 4.4epss 0.00
There was discovered a use after free bug in browser.c in the es_browser_get_variant function
- risk 0.29cvss 4.4epss 0.00
in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.
- risk 0.29cvss 5.6epss 0.01
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is…
- risk 0.29cvss 4.4epss 0.00
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark…
- risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
- risk 0.29cvss 4.4epss 0.00
the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
- risk 0.29cvss 4.4epss 0.00
A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault.
- risk 0.29cvss 4.4epss 0.00
A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- risk 0.29cvss 4.4epss 0.00
In vcu driver, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171675; Issue ID: ALPS06171675.
- risk 0.29cvss 4.4epss 0.00
In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.29cvss 4.4epss 0.00
NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service.
- risk 0.29cvss 5.5epss 0.01
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat…
- risk 0.29cvss 4.4epss 0.00
A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.
- risk 0.29cvss 5.5epss 0.00
An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN.
- risk 0.29cvss 5.5epss 0.00
An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py>.