On this page

CWE-416: Use After Free

Weakness Summary

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

  • Canonical source: MITRE CWE-416 (opens in a new tab)
  • Published Atomicorp CVE observations: 3
  • Distinct affected products in those observations: 2
  • Active Atomicorp rules associated with this weakness: 3

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2016-5771Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple VulnerabilitiesphpAttack Blocked by Atomicorp344365
CVE-2016-5773Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple VulnerabilitiesphpAttack Blocked by Atomicorp344365
CVE-2017-7185Cesanta Mongoose OS - Use-After-Freemongoose embedded web server libraryAttack Blocked by Atomicorp330791 , 340152

Associated Atomicorp WAF Rules

RuleStatusBehavior
330791Activedisruptive (deny)
340152Activedisruptive (deny)
344365Activedisruptive (deny)