CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,489 vulnerabilities with CWE-416
CVE-2025-49844 CRITICAL
Redis < 6.2.20, 8.2.1-8.2.2 - Authenticated Use-After-Free via Lua Script Garbage Collector Manipulation
CVSS 9.9
CVE-2025-10729 CRITICAL
Module - Use After Free
CVE-2025-11234 HIGH
QEMU - Use After Free
CVSS 7.5
CVE-2025-61692 HIGH
VT STUDIO <= 8.53 - Use-After-Free
CVSS 7.8
CVE-2025-46205 HIGH
podofo 0.10.0-0.10.5 - Use-After-Free in PdfTokenizer::ReadDictionary
CVSS 8.1
CVE-2025-39896 HIGH
Linux Kernel 6.8-6.12.46 6.13.0-6.16.6 - Use-After-Free in IVPU Device Recovery Work Queue
CVSS 7.8
CVE-2025-10994 MEDIUM
Open Babel < 3.1.1 - Use-After-Free in GAMESSOutputFormat::ReadMolecule
CVSS 5.3
CVE-2025-10501 HIGH
Google Chrome < 140.0.7339.185 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2025-10500 HIGH
Google Chrome < 140.0.7339.185 - Use-After-Free in Dawn via Crafted HTML Page
CVSS 8.8
CVE-2025-47327 HIGH
Qualcomm AQT1000 Firmware - Use-After-Free in Image Encoding
CVSS 7.8
CVE-2025-47315 HIGH
Qualcomm Firmware - Use-After-Free in Guest VM Memory Unmap Handling
CVSS 7.8
CVE-2025-27077 HIGH
Qualcomm Firmware - Use-After-Free in Guest VM Message Processing
CVSS 7.8
CVE-2025-27037 HIGH
Qualcomm FastConnect and Related Firmware - Memory Corruption in Camera Kernel Driver
CVSS 7.8
CVE-2025-8410 HIGH
RTI Connext Professional 7.5.0-7.5.9 - Use-After-Free in Security Plugins
CVSS 7.4
CVE-2025-39882 HIGH
Linux Kernel 6.6.105-6.6.106, 6.12.45-6.12.47, 6.16.5-6.16.7 - Use-After-Free in DRM Mediatek OF Node Handling
CVSS 7.8
CVE-2025-39881 HIGH
Linux Kernel 6.1-6.1.152, 6.2-6.6.106, 6.7-6.12.47, 6.13-6.16.7 - Use-After-Free in PSI Monitoring via Epoll Polling
CVSS 7.8
CVE-2025-39877 HIGH
Linux Kernel - Use-After-Free in state_show() via Race Condition
CVSS 7.8
CVE-2025-39873 HIGH
Linux Kernel - Use-After-Free in xilinx_can xcan_write_frame
CVSS 7.8
CVE-2025-39871 HIGH
Linux Kernel - Use-After-Free in idxd_remove Function
CVSS 7.8
CVE-2025-10824 MEDIUM
fio < 3.41 - Use-After-Free in __parse_jobs_ini Function
CVSS 5.3
CVE-2025-25177 MEDIUM
Software <unknown> - Use After Free
CVSS 5.1
CVE-2025-39866 HIGH
Linux Kernel 4.2-6.16.6 Use-After-Free in __mark_inode_dirty
CVSS 7.8
CVE-2025-39864 HIGH
Linux Kernel - Use-After-Free in cfg80211 BSS Comparison
CVSS 7.8
CVE-2025-39863 HIGH
Linux Kernel 3.10-6.6.105, 6.7.0-6.12.46, 6.13.0-6.16.6 - Use-After-Free in brcmf_btcoex_info Worker
CVSS 7.8
CVE-2025-39861 HIGH
Linux Kernel 6.4-6.6.104, 6.7-6.12.45, 6.13-6.16.5 - Use-After-Free in Bluetooth vhci DebugFS
CVSS 7.8
Details
Vulnerabilities 7,489
Exploit Likelihood High