CVE-2009-0749
realloc generates new buffer and pointer, but previous pointer is still retained, leading to use after free
CVE-2010-3328
Use-after-free in web browser, probably resultant from not initializing memory.