CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- phpDouble free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the...9.8 Critical
- phpDouble free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers...9.8 Critical
- phpDouble free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c...9.8 Critical
- imagemagickDouble free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers...5.5 Medium
- openslp, debian linux +1 moreDouble free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1...7.5 High
- microsoft windows 8.1, windows rt 8.1, windows server 2012 +2 moreDouble free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1,...7.2 High
- adobe flash player, flash player desktop runtime +1 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16...9.3 High
- imagemagickThe pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free)...5.5 Medium
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...7.6 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreDouble free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreDouble free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows...9.3 High
- adobe air, air sdk, flash player +7 more +9 moreDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...8.8 High
- apple pages, iphone os, mac os x +2 moreDouble free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote...7.5 High
- google chrome, debian linux +1 moreDouble free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows...7.5 High
- google chrome, apple iphone os, mac os x +5 more +7 moreDouble free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote...6.8 Medium
- google chrome, apple iphone os, mac os x +5 more +7 moreDouble free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote...7.5 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreDouble free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3,...6.9 Medium
- google chrome, xmlsoft libxml2, apache openoffice +14 more +16 moreDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...7.5 High
- linux kernel, canonical ubuntu linux, opensuse +3 more +5 moreDouble free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c...7.2 High
- microsoft windows xp, windows 2003 server, windows server 2008 +1 more +3 moreDouble free vulnerability in the Workstation service in Microsoft Windows allows remote...9.0 High
- fedoraproject fedora core, linux kernel, redhat enterprise linux +2 moreDouble free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat...4.9 Medium
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 High
- openbsd openssh, apple mac os x, mac os x server +1 more +3 moreSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...8.1 High
- mit kerberos 5, apple mac os x, mac os x server +1 more +3 moreDouble free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...9.8 Critical
- gnome gtkDouble free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial...7.5 High
- mit kerberos 5, debian linux, openpkg +2 moreDouble free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and...9.8 Critical
- mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...4.6 Medium
- mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...7.5 High
- microsoft internet explorer, outlook, windows 98 +5 more +7 moreDouble free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows...7.8 High
- opensslDouble free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service ...9.8 Critical
- cvs, freebsd +1 moreDouble-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of...7.5 High
- zlibThe decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and...9.8 Critical