← Back
CWE-416

7,425 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (7,425)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-18091
1Intel
1Graphics Driver
Nov 21, 2024
Mar 14, 2019
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.50...Show more
Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.Show less
CVE-2019-9706
1Debian
2Cron
Debian Linux
Nov 21, 2024
Mar 12, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
CVE-2018-18492
4Canonical
DebianMozilla+1 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+7 more
Nov 25, 2025
Feb 28, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability aff...Show more
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.Show less
CVE-2019-2000
1Google
1Android
Nov 21, 2024
Feb 28, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...Show more
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025789.Show less
CVE-2019-1992
1Google
1Android
Nov 21, 2024
Feb 28, 2019
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is need...Show more
In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069.Show less
CVE-2018-13905
1Qualcomm
20Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+17 more
Nov 21, 2024
Feb 25, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9...Show more
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.Show less
CVE-2018-13900
1Qualcomm
35Mdm9150 Firmware
Mdm9206 FirmwareMdm9607 Firmware+32 more
Nov 21, 2024
Feb 25, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Mus...Show more
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.Show less
CVE-2019-9020
5Canonical
DebianNetapp+2 more
5Debian Linux
LeapPhp+2 more
Nov 21, 2024
Feb 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or...Show more
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.Show less
CVE-2019-9003
4Canonical
LinuxNetapp+1 more
7Cn1610 Firmware
Hci Management NodeLeap+4 more
Nov 21, 2024
Feb 22, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd re...Show more
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.Show less
CVE-2019-5772
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2019-5764
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5760
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5759
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Feb 19, 2019
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2019-5756
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
CVE-2019-8912
4Canonical
LinuxOpensuse+1 more
4Enterprise Linux
LeapLinux Kernel+1 more
Nov 21, 2024
Feb 18, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
CVE-2019-6974
5Canonical
DebianF5+2 more
24Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+21 more
Nov 21, 2024
Feb 15, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVE-2019-8343
1Nasm
1Netwide Assembler
Nov 21, 2024
Feb 15, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
CVE-2018-6268
1Google
1Android
Nov 21, 2024
Feb 13, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161.
CVE-2018-13889
1Google
1Android
Nov 21, 2024
Feb 11, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed
CVE-2018-12014
1Google
1Android
Nov 21, 2024
Feb 11, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.