On this page

CWE-416: Use After Free

Weakness Summary

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

  • Canonical source: MITRE CWE-416 (opens in a new tab)
  • Published Atomicorp CVE observations: 5
  • Distinct affected products in those observations: 3
  • Active Atomicorp rules associated with this weakness: 5

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2016-5771Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple VulnerabilitiesphpProtected by Atomicorp rules344365
CVE-2016-5773Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple VulnerabilitiesphpProtected by Atomicorp rules344365
CVE-2026-109618PHP - Remote Code Execution via Out-of-Memory CorruptionPHPProtected by Atomicorp rules314143 , 330791 , 330793 , 340152
CVE-2026-109619PHP - Remote Code Execution via Stale Global StatePHPProtected by Atomicorp rules314143 , 330791 , 330793 , 340152
CVE-2017-7185Cesanta Mongoose OS - Use-After-Freemongoose embedded web server libraryProtected by Atomicorp rules330791 , 340152

Associated Atomicorp WAF Rules

RuleStatusBehavior
314143Activedisruptive (deny)
330791Activedisruptive (deny)
330793Activedisruptive (deny)
340152Activedisruptive (deny)
344365Activedisruptive (deny)