Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,898
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2017-9676 Information Disclosure in Google (CVE-2017-9676)
CVE-2015-6673 Use-After-Free in Libpgf (CVE-2015-6673)
CVE-2015-3890 Use-After-Free in Open Litespeed (CVE-2015-3890)
CVE-2015-1329 Use-After-Free in Ubuntu (CVE-2015-1329)
CVE-2017-9798 Use-After-Free in Apache Http Server (CVE-2017-9798)
CVE-2017-14528 Use-After-Free in Imagemagick (CVE-2017-14528)
CVE-2017-12133 Use-After-Free in GNU C Library (CVE-2017-12133)
CVE-2017-2808 Use-After-Free in Ledger-CLI (CVE-2017-2808)
CVE-2017-2821 Use-After-Free in Lexmark (CVE-2017-2821)
CVE-2017-13711 Use-After-Free in QEMU (CVE-2017-13711)
CVE-2017-14103 Use-After-Free in ReadJNGImage (CVE-2017-14103)
CVE-2017-13737 Use-After-Free in Graphicsmagick (CVE-2017-13737)
CVE-2017-13741 Use-After-Free in Liblouis (CVE-2017-13741)
CVE-2017-12877 Use-After-Free in Imagemagick (CVE-2017-12877)
CVE-2017-10661 Use-After-Free in Linux Kernel (CVE-2017-10661)
CVE-2017-7364 Use-After-Free in Google (CVE-2017-7364)
CVE-2017-9684 Vulnerability in Google (CVE-2017-9684)
CVE-2017-9685 Vulnerability in Google (CVE-2017-9685)
CVE-2017-8262 Vulnerability in Google (CVE-2017-8262)
CVE-2017-8266 Vulnerability in Google (CVE-2017-8266)
CVE-2017-8270 Vulnerability in Google (CVE-2017-8270)
CVE-2016-10385 Use-After-Free in IMS RCS (CVE-2016-10385)
CVE-2017-12936 Use-After-Free in Graphicsmagick (CVE-2017-12936)
CVE-2017-12932 Use-After-Free in PHP (CVE-2017-12932)
CVE-2017-12934 Use-After-Free in PHP (CVE-2017-12934)
CVE-2017-11279 Use-After-Free in Adobe Digital Editions (CVE-2017-11279)
CVE-2017-3113 Use-After-Free in Adobe Acrobat (CVE-2017-3113)
CVE-2017-3120 Use-After-Free in Adobe Acrobat (CVE-2017-3120)
CVE-2017-11254 Use-After-Free in Adobe Acrobat (CVE-2017-11254)
CVE-2017-11256 Use-After-Free in Adobe Acrobat (CVE-2017-11256)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details