CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,662 vulnerabilities with CWE-416
CVE-2020-0242 HIGH
Android - Use-After-Free in NuPlayerDriver.cpp
CVSS 7.8
CVE-2020-7827 HIGH
DaviewIndy <8.98.7 - Use After Free
CVSS 7.8
CVE-2020-3701 HIGH
Qualcomm Saipan, SM8250, SXR2130 Firmware - Use-After-Free in CamX Driver Error Notification
CVSS 7.8
CVE-2020-3671 CRITICAL
Snapdragon Compute - Use After Free
CVSS 9.8
CVE-2020-15706 MEDIUM
GRUB2 < 2.04 - Use-After-Free via Function Redefinition Race Condition
CVSS 6.4
CVE-2020-6518 HIGH
Google Chrome < 84.0.4147.89 - Use-After-Free in Developer Tools
CVSS 8.8
CVE-2020-6515 HIGH
Google Chrome < 84.0.4147.89 - Use-After-Free in Tab Strip
CVSS 8.8
CVE-2020-6509 CRITICAL
Google Chrome < 83.0.4103.116 - Use-After-Free in Extensions
CVSS 9.6
CVE-2020-6505 CRITICAL
Google Chrome < 83.0.4103.106 - Use-After-Free in Speech Component
CVSS 9.6
CVE-2020-15888 HIGH
Lua <= 5.4.0 - Heap-Based Buffer Over-Read via Stack Resize and Garbage Collection Interaction
CVSS 8.8
CVE-2020-15859 LOW
QEMU 4.2.0 - Use-After-Free in e1000e Packet Handling
CVSS 3.3
CVE-2020-0305 MEDIUM
Android - Use-After-Free via Race Condition in cdev_get
CVSS 6.4
CVE-2020-1382 HIGH
Windows 10 and Windows Server 2016 - Elevation of Privilege via Graphics Component Use-After-Free
CVSS 7.8
CVE-2020-1381 HIGH
Windows 10 and Windows Server 2016 - Elevation of Privilege via Graphics Component Use-After-Free
CVSS 7.8
CVE-2020-12420 HIGH
Firefox ESR < 68.10, Firefox < 78, Thunderbird < 68.10.0 - Use Afte...
CVSS 8.8
CVE-2020-12419 HIGH
Firefox ESR < 68.10 - Use After Free
CVSS 8.8
CVE-2020-12416 HIGH
Firefox < 78.0 - Use-After-Free in VideoStreamEncoder
CVSS 8.8
CVE-2020-12405 MEDIUM
Thunderbird <68.9.0-Firefox <77-Firefox ESR <68.9 - RCE
CVSS 5.3
CVE-2020-7457 HIGH
FreeBSD ip6_setpktopt Use-After-Free Privilege Escalation
CVSS 8.1
CVE-2020-10730 MEDIUM
Samba <4.10.17-4.12.4 - Memory Corruption
CVSS 6.5
CVE-2020-9262 HIGH
HUAWEI Mate 30 Firmware < 10.1.0.150(C00E136R5P3) - Use-After-Free
CVSS 7.8
CVE-2020-10760 MEDIUM
Samba <4.10.17-4.12.4 - Use After Free
CVSS 6.5
CVE-2020-15569 MEDIUM
MilkyTracker < 1.02.00 - Use-After-Free in PlayerGeneric Destructor
CVSS 5.5
CVE-2020-15475 CRITICAL
nDPI < 3.2 - Use-After-Free in ndpi_reset_packet_line_info
CVSS 9.8
CVE-2020-15389 MEDIUM
OpenJPEG < 2.3.1 - Use-After-Free in opj_decompress.c
CVSS 6.5
Details
Vulnerabilities 7,662
Exploit Likelihood High