Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-416 (释放后使用) — Vulnerability Class 2435

2435 vulnerabilities classified as CWE-416 (释放后使用). AI Chinese analysis included.

CWE-416, Use After Free, is a critical memory safety weakness occurring when a program continues to reference a memory location after it has been deallocated. Attackers typically exploit this vulnerability by freeing an object and then rapidly reallocating that same memory block with attacker-controlled data. Because the original pointer still points to the now-invalid address, the application may inadvertently execute malicious code or corrupt memory structures, often leading to arbitrary code execution or denial of service. To prevent this, developers must rigorously manage memory lifecycles by nullifying pointers immediately after freeing them, ensuring no dangling references remain. Utilizing modern programming languages with automatic garbage collection or employing static analysis tools to detect invalid memory accesses further mitigates the risk, ensuring that freed memory is never accessed again during the program’s execution.

MITRE CWE Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Common Consequences (4)
IntegrityModify Memory
The use of previously freed memory may corrupt valid data, if the memory area in question has been allocated and used properly elsewhere.
AvailabilityDoS: Crash, Exit, or Restart
If chunk consolidation occurs after the use of previously freed data, the process may crash when invalid data is used as chunk information.
ConfidentialityRead Memory
Read operations on freed memory can sometimes leak sensitive information instead of causing a crash
Integrity, Confidentiality, AvailabilityExecute Unauthorized Code or Commands
If malicious data is entered before chunk consolidation can take place, it may be possible to take advantage of a write-what-where primitive to execute arbitrary code. If the newly allocated data happens to hold a class, in C++ for example, various function pointers may be scattered within the heap …
Mitigations (2)
Architecture and DesignChoose a language that provides automatic memory management.
ImplementationWhen freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.
Effectiveness: Defense in Depth
Examples (2)
The following example demonstrates the weakness.
#include <stdio.h> #include <unistd.h> #define BUFSIZER1 512 #define BUFSIZER2 ((BUFSIZER1/2) - 8) int main(int argc, char **argv) { char *buf1R1; char *buf2R1; char *buf2R2; char *buf3R2; buf1R1 = (char *) malloc(BUFSIZER1); buf2R1 = (char *) malloc(BUFSIZER1); free(buf2R1); buf2R2 = (char *) malloc(BUFSIZER2); buf3R2 = (char *) malloc(BUFSIZER2); strncpy(buf2R1, argv[1], BUFSIZER1-1); free(buf1R1); free(buf2R2); free(buf3R2); }
Bad · C
The following code illustrates a use after free error:
char* ptr = (char*)malloc (SIZE); if (err) { abrt = 1; free(ptr); } ... if (abrt) { logError("operation aborted before commit", ptr); }
Bad · C
CVE IDTitleCVSSSeverityPublished
CVE-2025-62557 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 8.4 High2025-12-09
CVE-2025-62555 Microsoft Word Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.0 High2025-12-09
CVE-2025-62553 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.8 High2025-12-09
CVE-2025-62573 DirectX Graphics Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1607 7.0 High2025-12-09
CVE-2025-62563 Microsoft Excel Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.8 High2025-12-09
CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.8 High2025-12-09
CVE-2025-66627 Wasmi's Linear Memory has a Critical Use After Free Vulnerability — wasmi 8.4 High2025-12-09
CVE-2025-62408 c-ares has a Use After Free vulnerability when connection is cleaned up after error — c-ares 5.9 Medium2025-12-08
CVE-2025-66326 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.7 Medium2025-12-08
CVE-2025-13633 Google Chrome 安全漏洞 — Chrome 8.8AIHighAI2025-12-02
CVE-2025-13638 Google Chrome 安全漏洞 — Chrome 8.8AIHighAI2025-12-02
CVE-2025-20775 MediaTek Chipsets 安全漏洞 — MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8186, MT8188, MT8196, MT8667, MT8673, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8791T, MT8792, MT8793, MT8795T, MT8796, MT8798, MT8873, MT8883 6.7AIMediumAI2025-12-02
CVE-2025-20773 MediaTek Chipsets 安全漏洞 — MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793 6.7AIMediumAI2025-12-02
CVE-2025-20772 MediaTek Chipsets 安全漏洞 — MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8186, MT8188, MT8196, MT8667, MT8673, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8791T, MT8792, MT8793, MT8795T, MT8796, MT8798, MT8873, MT8883 6.7AIMediumAI2025-12-02
CVE-2025-20770 MediaTek Chipsets 安全漏洞 — MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793 6.7AIMediumAI2025-12-02
CVE-2025-58408 GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code — Graphics DDK 5.5AIMediumAI2025-12-01
CVE-2025-6349 Mali GPU Kernel Driver allows improper GPU memory processing operations — Valhall GPU Kernel Driver 7.8AIHighAI2025-12-01
CVE-2025-8045 Mali GPU Kernel Driver allows improper GPU processing operations — Valhall GPU Kernel Driver 7.8AIHighAI2025-12-01
CVE-2025-58311 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.8 Medium2025-11-28
CVE-2025-58307 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.4 Medium2025-11-28
CVE-2025-65953 NanoMQ UAF of retain message due to invalid MQTTV5 properties — nanomq 7.5AIHighAI2025-11-25
CVE-2024-9126 Google Chrome 安全漏洞 — Chrome 8.8 -2025-11-14
CVE-2025-13120 mruby array.c sort_cmp use after free — mruby 5.3 Medium2025-11-13
CVE-2011-10034 IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS — AUTOMGEN 5.5 -2025-11-12
CVE-2025-11797 DWG File Parsing Use-After-Free Vulnerability — 3ds Max 7.8 High2025-11-12
CVE-2025-64531 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - Stager 7.8 High2025-11-11
CVE-2025-61834 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - Stager 7.8 High2025-11-11
CVE-2025-61842 Format Plugins | Use After Free (CWE-416) — Format Plugins 5.5 Medium2025-11-11
CVE-2025-62213 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability — Windows 10 Version 1607 7.0 High2025-11-11
CVE-2025-62205 Microsoft Office Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.8 High2025-11-11

Vulnerabilities classified as CWE-416 (释放后使用) represent 2435 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.