CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- huawei technologies co., ltd. p10 plus, huawei p10 plus firmware +1 moreThe Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY...7.8 High
- huawei technologies co., ltd. p9 plus, huawei p9 plus firmware +1 moreThe soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE...7.8 High
- f5 big-ip ltm, websafe, f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, and websafe +9 more +11 moreIn BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12...5.9 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- nlnetlabs ldnsA double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.9.8 Critical
- nlnetlabs ldnsA double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.9.8 Critical
- collectdThe csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is...9.8 Critical
- ffmpegDouble free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial...6.5 Medium
- google chrome, uclouvain openjpeg, debian linux +2 moreDouble free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in...6.5 Medium
- icu-project international components for unicodeDouble free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through...9.8 Critical
- ccsv project ccsvccsv Double Free vulnerability5.5 Medium
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- mit kerberos 5, fedoraproject fedora +1 moreDouble free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified...9.8 Critical
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreDouble free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote...7.5 High
- pngcrush project pngcrushDouble-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows...9.8 Critical
- bitdefender total security, zero day initiative bitdefender total security +1 moreThis vulnerability allows local attackers to execute arbitrary code on vulnerable installations...7.0 High
- libfpx project libfpxDouble free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers...6.5 Medium
- libzipDouble free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition...7.0 High
- creolabs gravityCreolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting...9.8 Critical
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders...9.8 Critical
- xenThe grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which...8.1 High
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to...5.9 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a...7.8 High
- google chrome, debian linux +1 moreDouble-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows...6.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability...7.8 High
- openldap, debian linux, mcafee policy auditor +7 more +9 moreservers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free...6.5 Medium
- debian linux, dropbear ssh project ssh, netapp h410c firmware +2 moreThe server in Dropbear before 2017.75 might allow post-authentication root remote code execution...8.8 High
- debian linux, linux kernel +1 moreThe inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4...7.8 High
- opencv, debian linux +1 moreDouble Free in OpenCV8.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue...7.8 High
- tigervncIn TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can...8.8 High
- debian linux, linux kernel +1 moreRace condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to...7.0 High
- libimobiledevice libplistThe plist_free_data function in plist.c in libplist allows attackers to cause a denial of service...7.5 High
- linux kernelnet/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel...5.5 Medium
- debian linux, linux kernel +1 moreThe dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11...7.8 High
- moxa softcmsAn issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL...8.1 High
- libgdDouble free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd)...9.8 Critical
- giflib project giflibMultiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have...9.8 Critical
- imagemagick, debian linux +1 moreDouble free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have...7.8 High
- gnu gnutls, opensuse leap +1 moreDouble free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26...9.8 Critical
- linux kernelRace condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel...7.8 High
- linux kernelDouble free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux...7.3 High
- jasper project jasper, fedoraproject fedora, opensuse +2 moreDouble free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10...7.8 High
- curlThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 Medium
- curlThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +1 more +3 moreDouble free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote...5.5 Medium
- fontconfig project fontconfig, canonical ubuntu linux, debian linux +1 more +3 morefontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary...7.8 High
- php, debian linux, opensuse leap +4 more +6 moreDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...9.8 Critical
- Show moreLoading…