CWE-416
8,609 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CVEs (8,609)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitrary code execution in the context of the current user. Exploi...Show more |
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch I...Show more |
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch I...Show more |
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch I...Show more |
In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more |
In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more |
In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more |
1Optical Character Recognition Project 1Optical Character Recognition Jun 17, 2026 Nov 17, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c. |
Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploi...Show more |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function |
2Busybox Fedoraproject2Busybox FedoraJun 17, 2026 Nov 15, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function |
Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure. |
1Advantech 1Webaccess Hmi Designer Jun 17, 2026 Nov 15, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer |