Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,604)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31441 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 May 7, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a mali...Show more This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13101.Show less
CVE-2021-1927 1Qualcomm 457Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+454 more Jun 17, 2026 May 7, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra...Show more Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1905 1Qualcomm 396Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+393 more Jun 17, 2026 May 7, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...Show more Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-1891 1Qualcomm 414Apq8009w Firmware Apq8017 FirmwareApq8053 Firmware+411 more Jun 17, 2026 May 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...Show more A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-11295 1Qualcomm 173Fsm10055 Firmware Fsm10056 FirmwarePm3003a Firmware+170 more Jun 17, 2026 May 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...Show more Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-20204 3Debian FedoraprojectGetdata Project 3Debian Linux FedoraGetdata Jun 17, 2026 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party...Show more A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker.Show less
CVE-2020-28018 1Exim 1Exim Jun 17, 2026 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.
CVE-2021-21232 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 30, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21417 2Debian Fluidsynth 2Debian Linux Fluidsynth Jun 17, 2026 Apr 29, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.
CVE-2021-21226 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21214 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
CVE-2021-21213 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21207 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.6 HIGH· v3 6.8 MEDIUM· v2 Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2021-21206 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21204 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21203 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21202 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 8.6 HIGH· v3 6.8 MEDIUM· v2 Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2021-21201 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 26, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-31804 1Leocad 1Leocad Jun 17, 2026 Apr 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document.
CVE-2021-22893 1Ivanti 1Connect Secure Aug 12, 2026 Apr 23, 2021 N/A· v4 10.0 CRITICAL· v3 7.5 HIGH· v2 Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow...Show more Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.Show less

Previous 1...316317318...431 Next