#use-after-free (uaf) CTF challenges

Also written as uaf.

58 CTF challenges using use-after-free (uaf) from 43 CTFs (2017–2026), 58 with writeups. Mostly Pwn (53%) and Misc (45%).

Pwn · 31 Misc · 26 Crypto · 1

Often combined with

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Category	Has
karte #use-after-free (uaf)#tcache-poisoning	TSG 2020	–	Misc	files wu 3
at_your_command #use-after-free (uaf)#file-structure-exploitation #fake-file	Pwn2Win 2020	63.56	Misc	files wu 3
tinyfs #use-after-free (uaf)#arbitrary-write	TSG 2023	–	Pwn	files wu 3
std_vector #use-after-free (uaf)	TSG 2020	–	Misc	files wu 3
vote #use-after-free (uaf)	N1CTF 2018	24.41	Misc	files wu 3
asvdb #uninitialized-variable #use-after-free (uaf)#double-free #tcache-poisoning #free-hook-one-gadget	ASIS 2018 Finals	55.00	Misc	files wu 3
diylist #type-confusion #arbitrary-read #use-after-free (uaf)	zer0pts 2020	24.56	Misc	files wu 3
error_program #heap #use-after-free (uaf)#tcache #libc-2.27	Defenit 2020	23.88	Misc	files wu 3
cache #heap #use-after-free (uaf)#tcache #heap-leak	Defcamp 2022	–	Pwn	files wu 3
baby-rop #heap #use-after-free (uaf)#glibc-2.34 #stack-pivot #seccomp #orw	DiceCTF 2022	24.82	Pwn	files wu 3
EasyWinHeap #windows-heap-exploitation #use-after-free (uaf)	SCTF 2020	–	Misc	files wu 2
chessrs #wasm #rust #use-after-free (uaf)#xss #web	DiceCTF 2023	36.70	Pwn	files wu 2
Cache_7 #use-after-free (uaf)#tcache-poisoning	Shakti 2021	25.00	Pwn	files wu 2
lil_wishes_db #use-after-free (uaf)#tcache #one-gadget	X-MAS 2020	–	Misc	files wu 2
Notepad #use-after-free (uaf)#tcache #format-string	VolgaCTF 2020 Quals	32.80	Misc	files wu 2
kcipher #use-after-free (uaf)#kernel-uaf	corCTF 2023	36.97	Pwn	files wu 2
faker #use-after-free (uaf)#heap #seccomp-orw-shellcode	3kCTF 2020	24.14	Misc	files wu 2
Lil_Chompy #use-after-free (uaf)#heap #arbitrary-read	SunshineCTF 2020	23.34	Misc	files wu 2
video_player #use-after-free (uaf)#fastbin-attack #vtable-hijack #malloc-hook	SECCON 2017 Quals	30.00	Misc	files wu 2
EncryptionService #use-after-free (uaf)#fastbin #heap-overlap	UTCTF 2019	–	Misc	files wu 2
bookworm #use-after-free (uaf)	HackPack 2020	–	Misc	files wu 2
ragnarok #use-after-free (uaf)	HITCON 2017 Quals	69.38	Misc	files wu 2
Baby_Kernel #kernel-exploitation #use-after-free (uaf)#jop	UIUCTF 2025	–	Pwn	files wu 2
Quotebook #heap #use-after-free (uaf)#function-pointer-overwrite	DaVinciCTF 2021	24.50	Pwn	files wu 2
q #vim9script #use-after-free (uaf)	TeamItaly 2023	24.88	Pwn	files wu 1
membership_management #use-after-free (uaf)#tcache-poisoning #overlapping-chunks	Securinets 2021 Quals	41.71	Pwn	files wu 1
refcnt #use-after-free (uaf)#tcache-poisoning #fsop	ASIS 2020 Finals	64.97	Misc	files wu 1
SimpleNote #use-after-free (uaf)#tcache-poisoning #fastbin-fd-overwrite	BlitzCTF 2025	23.20	Pwn	files wu 1
University_Pwn #use-after-free (uaf)#tcache-poisoning	Tamil 2021	14.13	Pwn	files wu 1
Monke #use-after-free (uaf)#tcache	UTCTF 2021	–	Pwn	files wu 1
Phantom_Device #use-after-free (uaf)#refcount-mismatch #tcache-grooming #role-forgery	BDSec 2026	15.62	Pwn	files wu 1
The_Cobol_Job #use-after-free (uaf)#libcob #free-hook #proc-self-maps	PlaidCTF 2021	99.64	Pwn	files wu 1
heaphp #use-after-free (uaf)#info-leak #php	WACON 2023 Quals	25.00	Pwn	files wu 1
Maltigriti #use-after-free (uaf)#heap-overlap	1337UP 2023	24.23	Pwn	files wu 1
UAP #use-after-free (uaf)#function-pointer-hijack	1337UP 2024	–	Pwn	files wu 1
Plaidflix #use-after-free (uaf)#double-free #safe-linking #tcache-poisoning	PlaidCTF 2021	99.64	Pwn	files wu 1
cheap_logs #use-after-free (uaf)	DownUnderCTF 2025	91.66	Crypto	files wu 1
Free_Real_Estate #use-after-free (uaf)	NahamCon 2022	24.61	Pwn	files wu 1
ctf_sim #use-after-free (uaf)	TAMUctf 2022	–	Pwn	files wu 1
CoffeeShop #use-after-free (uaf)	idekCTF 2021	24.56	Pwn	files wu 1