CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,566 vulnerabilities with CWE-416
CVE-2022-34470 CRITICAL
Firefox < 102.0 and Firefox ESR < 91.11 - Use-After-Free in Session History Navigation
CVSS 9.8
CVE-2022-31747 CRITICAL
Firefox < 101 and Firefox ESR < 91.10 - Memory Corruption
CVSS 9.8
CVE-2022-28282 MEDIUM
Firefox < 99.0 and Firefox ESR < 91.8 - Use-After-Free via Localization Link
CVSS 6.5
CVE-2022-26486 CRITICAL KEV
Firefox < 97.0.2, ESR < 91.6.1, Android < 97.3.0, Thunderbird < 91.6.2, Focus < 97.3.0 - Use-After-Free via WebGPU IPC
CVSS 9.6
CVE-2022-26485 HIGH KEV
Firefox < 97.0.2 - Use After Free
CVSS 8.8
CVE-2022-26385 MEDIUM
Firefox < 98.0 - Use-After-Free during Thread Shutdown
CVSS 6.5
CVE-2022-26381 HIGH
Firefox <98- Thunderbird <91.7 - Use After Free
CVSS 8.8
CVE-2022-22740 HIGH
Firefox < 96.0 and Firefox ESR < 91.5 - Use-After-Free in Network Request Handling
CVSS 8.8
CVE-2022-1196 MEDIUM
Firefox ESR < 91.8 - Use-After-Free in VR Process
CVSS 6.5
CVE-2022-1097 MEDIUM
Firefox < 99.0 and Firefox ESR < 91.8 - Use-After-Free in NSSToken
CVSS 6.5
CVE-2022-46282 HIGH
CX-Drive <= 3.00 - Use-After-Free via Crafted File
CVSS 7.8
CVE-2022-46311 HIGH
Contacts Component - Info Disclosure
CVSS 7.5
CVE-2022-42520 MEDIUM
Android - Use-After-Free in ServiceInterface::HandleRequest
CVSS 6.7
CVE-2022-20581 MEDIUM
Android Pixel Camera Driver - Use-After-Free
CVSS 6.7
CVE-2022-20571 MEDIUM
Android Kernel - Use-After-Free in dm-android-verity.c extract_metadata
CVSS 6.7
CVE-2022-20568 HIGH
Android - Use-After-Free in Kernel Memory
CVSS 7.8
CVE-2022-20566 HIGH
Android - Use-After-Free in l2cap_chan_put
CVSS 7.8
CVE-2022-20561 HIGH
Android - Use-After-Free in aud_hal_tunnel.c
CVSS 7.8
CVE-2022-20554 MEDIUM
Android 13 - Use-After-Free in InputDevice.cpp
CVSS 6.7
CVE-2022-20552 MEDIUM
Android 13 - Use-After-Free in btif_a2dp_sink.cc
CVSS 5.5
CVE-2022-20540 HIGH
Android - Use-After-Free in SurfaceFlinger::doDump
CVSS 7.8
CVE-2022-20524 HIGH
Android - Use-After-Free in Vibrator.cpp
CVSS 7.8
CVE-2022-20514 MEDIUM
Android 13 - Use-After-Free in Idmap2Service.cpp
CVSS 6.7
CVE-2022-42867 HIGH
Safari < 16.2 - Use-After-Free
CVSS 8.8
CVE-2022-4283 HIGH
X.Org X Server - Use-After-Free in XkbCopyNames via XkbGetKbdByName Request
CVSS 7.8
Details
Vulnerabilities 7,566
Exploit Likelihood High