Chain: race condition (CWE-362) leads to use-after-free (CWE-416), as exploited in the wild per CISA KEV.
CVE-2010-4168
Use-after-free triggered by closing a connection while data is still being transmitted.
CVE-2010-2941