CVE-2021-40399 — An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351

Matched remediation archetype

Use-after-free, double free, and expired resource use

This catalog composition supplies bounded fallback guidance. Explicitly reviewed curated workflows load with the complete record below.

Check exposure

• Trace ownership, references, callbacks, asynchronous tasks, and teardown paths around the affected object or resource.
• Identify reachable inputs and timing or state transitions that can release the object while references remain.
• Confirm affected builds, allocators, feature flags, architectures, and process privileges.

Remediate safely

• Apply the maintained ownership or lifetime fix and rebuild all artifacts containing the affected native code.
• Use explicit ownership, safe reference management, cancellation and join semantics, and idempotent teardown.
• Add deterministic lifetime tests plus isolated sanitizer and concurrency coverage for shutdown and error paths.