On this page
CWE-416: Use After Free
Weakness Summary
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
- Canonical source: MITRE CWE-416 (opens in a new tab)
- Published Atomicorp CVE observations: 5
- Distinct affected products in those observations: 3
- Active Atomicorp rules associated with this weakness: 5
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2016-5771 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | php | Protected by Atomicorp rules | 344365 |
| CVE-2016-5773 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | php | Protected by Atomicorp rules | 344365 |
| CVE-2026-109618 | PHP - Remote Code Execution via Out-of-Memory Corruption | PHP | Protected by Atomicorp rules | 314143 , 330791 , 330793 , 340152 |
| CVE-2026-109619 | PHP - Remote Code Execution via Stale Global State | PHP | Protected by Atomicorp rules | 314143 , 330791 , 330793 , 340152 |
| CVE-2017-7185 | Cesanta Mongoose OS - Use-After-Free | mongoose embedded web server library | Protected by Atomicorp rules | 330791 , 340152 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 314143 | Active | disruptive (deny) |
| 330791 | Active | disruptive (deny) |
| 330793 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |