Common Weakness Enumeration

CWE-416 Use After Free

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-416 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-2mxg-prvg-9jfg CVE-2026-85790 MODERATE

Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability

2026-10-13
GHSA-2cw7-v8ff-p88r CVE-2026-54899 HIGH

Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle

2026-10-06
GHSA-9ppp-w3g4-fh4q CVE-2026-54897 HIGH

Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close

2026-10-06
GHSA-wq5f-xc86-pv6w - HIGH

sharp : Vulnerability in librsvg dependency CVE-2026-96889

2026-10-06
GHSA-mwm8-39rw-8826 - MODERATE

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

2026-10-02
GHSA-2gq3-ww97-wfjm CVE-2026-56376 LOW

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

2026-09-24
GHSA-8g9f-ccmr-vfvg - MODERATE

Duplicate Advisory: ImageMagick has a possible heap Use After Free vulnerability in its meta coder

2026-09-24
GHSA-92f5-vc22-8j33 CVE-2026-62815 CRITICAL

Microsoft QUIC: Remote Code Execution Vulnerability

2026-09-08
GHSA-2q33-cf8w-7q23 - CRITICAL

Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability

2026-09-08
GHSA-9pwq-gcrx-wghh CVE-2026-55406 MODERATE -

Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

2026-08-28
GHSA-mc9m-6fm9-pghc - MODERATE

Zoo Design Studio: Memory-corruption in memory handling of lib-kcl

2026-08-20
GHSA-c494-m2fq-59mx CVE-2026-62898 HIGH

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

2026-08-11
GHSA-9hj4-r449-hfvc CVE-2026-71847 LOW

Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

2026-08-07
GHSA-cq5v-8q36-5273 CVE-2026-69244 HIGH

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

2026-08-03
GHSA-4mrv-5p47-p938 CVE-2026-54522 LOW

MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

2026-07-30
GHSA-j7fr-3v8c-3qc3 CVE-2026-54620 LOW

sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks

2026-07-28
GHSA-28hh-pr2h-2w89 CVE-2026-54619 LOW

sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity

2026-07-28
GHSA-qvxh-prvr-85w2 - LOW

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

2026-07-24
GHSA-6jwg-7q3p-5fqm - LOW

ImageMagick: Use-After-Free when freetype initialization fails

2026-07-24
GHSA-qh5g-q395-cx4j - LOW

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

2026-07-24
GHSA-ff5c-8x9r-8qcw CVE-2026-55510 MODERATE

ImageMagick: Use-After-Free in crafted 8BIM when identifying an image

2026-07-24
GHSA-ggxf-9f6j-w742 - MODERATE -

Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`

2026-07-16
GHSA-q95x-7g78-rccv - MODERATE -

OneRingBuf has a Use After Free Vulnerability

2026-07-08
GHSA-pp85-5j63-xpq3 CVE-2025-10994 LOW

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

2026-06-30
GHSA-px7q-ggqj-hcf2 CVE-2026-53462 MODERATE

ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails

2026-06-26