CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,542 vulnerabilities with CWE-416
CVE-2024-47718 HIGH
Linux Kernel 5.6-6.11.1 - Use-After-Free in rtw_wait_firmware_completion
CVSS 7.8
CVE-2024-47711 HIGH
Linux Kernel 6.9.8-6.10 6.11.2-6.11.* 6.12 - Use-After-Free in af_unix manage_oob
CVSS 7.8
CVE-2024-47706 MEDIUM
Linux Kernel - Use-After-Free in BFQ Scheduler Merge Chain Handling
CVSS 5.5
CVE-2024-47701 HIGH
Linux Kernel - Use-After-Free in ext4_search_dir via Inlined Directory Entry Lookup
CVSS 7.8
CVE-2024-47696 HIGH
Linux Kernel 4.19.320-5.4 - Use-After-Free in RDMA/iwcm Work Queue Handling
CVSS 7.8
CVE-2024-47691 HIGH
Linux Kernel 4.16-6.6.53, 6.7.0-6.10.12, 6.11.0-6.11.1 - Use-After-Free in f2fs_stop_gc_thread
CVSS 7.8
CVE-2024-47676 HIGH
Linux Kernel 6.9-6.10.12, 6.11.0-6.11.1, 6.12 - Use-After-Free in hugetlb Fault Pathway
CVSS 7.8
CVE-2024-47675 HIGH
Linux Kernel 6.6-6.6.53, 6.7-6.10.12, 6.11-6.11.1 - Use-After-Free in BPF Uprobe Multi-Link Attachment
CVSS 7.8
CVE-2024-49023 MEDIUM
Microsoft Edge Chromium < 130.0.2849.46 - Remote Code Execution via Use-After-Free
CVSS 5.9
CVE-2024-3187 MEDIUM
EmbedThis GoAhead <= 6.0.0 - Use-After-Free and Double Free in JST Template Parsing
CVSS 5.9
CVE-2024-9961 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 8.8
CVE-2024-9960 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 7.5
CVE-2024-9959 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 8.8
CVE-2024-9957 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 8.8
CVE-2024-9955 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 8.8
CVE-2024-9954 HIGH
Google Chrome <130.0.6723.58 - Use After Free
CVSS 8.8
CVE-2024-9979 MEDIUM
PyO3 0.22.0-0.22.3 - Use-After-Free via Weak Python Reference Borrowing
CVSS 5.3
CVE-2024-43701 HIGH
Imagination Technologies Graphics DDK 1.17-24.2 RTM1 and >=24.2 RTM2 - Use-After-Free via GPU System Calls
CVSS 7.8
CVE-2024-8376 HIGH
Eclipse Mosquitto <2.0.18a - Use After Free
CVSS 7.5
CVE-2024-47666 MEDIUM
Linux Kernel - Use-After-Free in pm8001_phy_control
CVSS 5.5
CVE-2024-45138 HIGH
Substance3D - Stager <3.0.3 - Use After Free
CVSS 7.8
CVE-2024-9680 CRITICAL KEV
Firefox < 131.0.2 and ESR < 128.3.1 and ESR < 115.16.1 - Use-After-Free in Animation Timelines
CVSS 9.8
CVE-2024-47418 HIGH
Adobe Animate < 23.0.8 - Use-After-Free
CVSS 7.8
CVE-2024-47415 HIGH
Adobe Animate < 23.0.8 - Use-After-Free
CVSS 7.8
CVE-2024-47414 HIGH
Adobe Animate < 23.0.8 - Use-After-Free
CVSS 7.8
Details
Vulnerabilities 7,542
Exploit Likelihood High