← Back
CWE-416

7,452 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (7,452)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-0113
1Google
1Android
Nov 21, 2024
Jun 10, 2020
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interac...Show more
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913Show less
CVE-2020-1226
1Microsoft
3365 Apps
ExcelOffice
Nov 21, 2024
Jun 9, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...Show more
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.Show less
CVE-2020-1225
1Microsoft
3365 Apps
ExcelOffice
Nov 21, 2024
Jun 9, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...Show more
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.Show less
CVE-2020-1207
1Microsoft
8Windows 10
Windows 7Windows 8.1+5 more
Nov 21, 2024
Jun 9, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-...Show more
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247, CVE-2020-1251, CVE-2020-1253, CVE-2020-1310.Show less
CVE-2020-9795
1Apple
5Ipados
Iphone OsMac Os X+2 more
Nov 21, 2024
Jun 9, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary c...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2020-13904
3Canonical
DebianFfmpeg
3Debian Linux
FfmpegUbuntu Linux
Nov 21, 2024
Jun 7, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavfo...Show more
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.Show less
CVE-2020-13871
6Debian
FedoraprojectNetapp+3 more
12Cloud Backup
Communications Messaging ServerCommunications Network Charging And Control+9 more
Nov 21, 2024
Jun 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
CVE-2020-13814
1Foxitsoftware
2Phantompdf
Reader
Nov 21, 2024
Jun 4, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
CVE-2020-13806
1Foxitsoftware
2Phantompdf
Reader
Nov 21, 2024
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.
CVE-2020-6496
3Debian
GoogleOpensuse
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Jun 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6493
3Debian
GoogleOpensuse
4Backports
ChromeDebian Linux+1 more
Nov 21, 2024
Jun 3, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-3618
1Qualcomm
5Ipq6018 Firmware
Ipq8074 FirmwareQca8081 Firmware+2 more
Nov 21, 2024
Jun 2, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130
CVE-2019-14087
1Qualcomm
2Msm8909w Firmware
Qcs605 Firmware
Nov 21, 2024
Jun 2, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605
CVE-2020-13630
9Apple
BrocadeCanonical+6 more
19Cloud Backup
Communications Network Charging And ControlDebian Linux+16 more
Nov 21, 2024
May 27, 2020
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-12387
1Mozilla
3Firefox
Firefox EsrThunderbird
Nov 21, 2024
May 26, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunder...Show more
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.Show less
CVE-2020-1799
1Huawei
1E6878 370 Firmware
Nov 21, 2024
May 21, 2020
N/A· v4
7.5 HIGH· v3
5.4 MEDIUM· v2
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker...Show more
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.Show less
CVE-2020-6474
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
May 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6467
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
May 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6466
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
May 21, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6465
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
May 21, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.