On this page
CWE-416: Use After Free
Weakness Summary
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
- Canonical source: MITRE CWE-416 (opens in a new tab)
- Published Atomicorp CVE observations: 3
- Distinct affected products in those observations: 2
- Active Atomicorp rules associated with this weakness: 3
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2016-5771 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | php | Attack Blocked by Atomicorp | 344365 |
| CVE-2016-5773 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | php | Attack Blocked by Atomicorp | 344365 |
| CVE-2017-7185 | Cesanta Mongoose OS - Use-After-Free | mongoose embedded web server library | Attack Blocked by Atomicorp | 330791 , 340152 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 330791 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |