1480
Description
The product uses, accesses, or otherwise operates on a resource after that resource has been
expired, released, or revoked.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 666 Operation on Resource in Wrong Phase of Lifetime 1462
ParentOf 298 Improper Validation of Certificate Expiration 726
ParentOf 324 Use of a Key Past its Expiration Date 792
ParentOf 613 Insufficient Session Expiration 1371
ParentOf 825 Expired Pointer Dereference 1732
ParentOf 910 Use of Expired File Descriptor 1800
CanFollow 562 Return of Stack Variable Address 1278
CanFollow 826 Premature Release of Resource During Expected Lifetime 1734
CanFollow 911 Improper Update of Reference Count 1801
CanFollow 1341 Multiple Releases of Same Resource or Handle 2246
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ParentOf 415 Double Free 1008
ParentOf 416 Use After Free 1012
ParentOf 613 Insufficient Session Expiration 1371
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ParentOf 415 Double Free 1008
ParentOf 416 Use After Free 1012
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
Nature Type ID Name Page
ParentOf 415 Double Free 1008
ParentOf 416 Use After Free 1012
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Mobile (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Modify Application Data
Read Application Data
If a released resource is subsequently reused or
reallocated, then an attempt to use the original resource
might allow access to sensitive data that is associated with
a different user or entity.
Other Other
CWE Version 4.14
CWE-672: Operation on a Resource after Expiration or Release
CWE-672: Operation on a Resource after Expiration or Release