CWE-416

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF c

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after fr

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can le

In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.

In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at

In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to lo

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lea

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then m

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID

Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon C

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An ap

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.1

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when c

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-a

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attack

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/iso_server/iso_

In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS b

In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could le

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacke

A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthent

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame

The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_Obj

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrate

An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory loca

In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosur

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the rel

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free i

Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use af

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthen

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal add

In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to l

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/

In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race co

A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry becau

A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Sna

Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Sn

An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caus

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() f

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local es