CWE-416
8,593 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CVEs (8,593)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
4Debian FedoraprojectGoogle+1 more7Chrome Debian LinuxEnterprise Linux Desktop+4 moreJun 17, 2026 Dec 10, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
4Canonical DebianLinux+1 more18A700s Firmware Active Iq Unified ManagerAff 8300 Firmware+15 moreJun 17, 2026 Dec 8, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-spa...Show more |
2Linux Netapp7Active Iq Unified Manager Cloud BackupData Availability Services+4 moreJun 17, 2026 Dec 8, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/s...Show more |
In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges n...Show more |
In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...Show more |
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which c...Show more |
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefi...Show more |
An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP reques...Show more |
In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Dec 3, 2019 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Dec 3, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. |
2Canonical Linux2Linux Kernel Ubuntu LinuxJun 17, 2026 Dec 3, 2019 N/A· v4 6.3 MEDIUM· v3 6.9 MEDIUM· v2 In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41. |
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Dec 3, 2019 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e. |
3Canonical LinuxOpensuse3Leap Linux KernelUbuntu LinuxJun 17, 2026 Dec 3, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Dec 3, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035. |
3Canonical DebianLinux3Debian Linux Linux KernelUbuntu LinuxJun 17, 2026 Dec 3, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Dec 3, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79. |
2Linux Netapp5Active Iq Unified Manager Cloud BackupLinux Kernel+2 moreJun 17, 2026 Nov 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. |
5Canonical DebianLinux+2 more14Active Iq Unified Manager Aff A400 FirmwareAff A700s Firmware+11 moreJun 17, 2026 Nov 28, 2019 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already f...Show more |