← Back
CWE-416

8,553 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (8,553)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14915
1Qualcomm
4Sd 625 Firmware
Sd 650 FirmwareSd 652 Firmware+1 more
Nov 21, 2024
Mar 30, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.
CVE-2018-0170
1Cisco
1Ios Xe
Nov 21, 2024
Mar 28, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, related to the OpenDNS software. The vulner...Show more
A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming packet, leading to access to an internal data structure after it has been freed. An attacker could exploit this vulnerability by sending crafted, malformed IP packets to an affected device. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvb86327.Show less
CVE-2018-9009
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 25, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.
CVE-2018-8964
1Libming
1Libming
Jun 17, 2026
Mar 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVE-2018-8963
1Libming
1Libming
Jun 17, 2026
Mar 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVE-2018-8962
1Libming
1Libming
Jun 17, 2026
Mar 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVE-2018-8961
1Libming
1Libming
Jun 17, 2026
Mar 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVE-2018-7521
1Omron
1Cx Supervisor
Jun 17, 2026
Mar 21, 2018
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.
CVE-2018-8807
1Libming
1Libming
Jun 17, 2026
Mar 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVE-2018-8806
1Libming
1Libming
Jun 17, 2026
Mar 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file.
CVE-2018-3561
1Google
1Android
Nov 21, 2024
Mar 16, 2018
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_deinit() leads to a Use After Free condition.
CVE-2017-18066
1Google
1Android
Nov 21, 2024
Mar 16, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads to use memory after it is freed in msm_core_ioctl().
CVE-2017-16749
1Deltaww
1Delta Industrial Automation Screen Editor
Nov 21, 2024
Mar 15, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability.
CVE-2017-18234
3Canonical
DebianExempi Project
3Debian Linux
ExempiUbuntu Linux
Nov 21, 2024
Mar 15, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing...Show more
An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFiles/source/FormatSupport/TIFF_Support.hpp.Show less
CVE-2018-0935
1Microsoft
1Internet Explorer
Nov 21, 2024
Mar 14, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote cod...Show more
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0925.Show less
CVE-2016-9591
3Debian
Jasper ProjectRedhat
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Nov 21, 2024
Mar 9, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
CVE-2018-6916
1Freebsd
1Freebsd
Jun 17, 2026
Mar 9, 2018
N/A· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerabi...Show more
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system crash or other unpredictable results.Show less
CVE-2017-18220
1Graphicsmagick
1Graphicsmagick
Nov 21, 2024
Mar 5, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impa...Show more
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403.Show less
CVE-2017-18218
1Linux
1Linux Kernel
Nov 21, 2024
Mar 5, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in...Show more
In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit.Show less
CVE-2018-0491
1Torproject
1Tor
Nov 21, 2024
Mar 5, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in t...Show more
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.Show less