CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- surina soundtouchThe WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to...8.8 High
- fedora project 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux aus +5 more +7 moreA flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in...7.5 High
- opensc project openscA double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc...6.6 Medium
- opensc project openscA double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in...6.6 Medium
- opensc project openscA double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c...6.6 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...9.8 Critical
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...7.8 High
- davegamble cjsonDave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in...8.8 High
- libgd, canonical ubuntu linux, debian linux +2 moreLibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...8.8 High
- gnu libredwgdwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in...6.5 Medium
- adobe acrobat dc, acrobat reader dc +1 moreAdobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006...9.8 Critical
- servo smallvecDouble free in smallvec9.8 Critical
- techsmith mp4v2A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition while processing the power stats debug file to read status, a double free...7.0 High
- google android, canonical ubuntu linux +1 moreIn driver_override_store and driver_override_show of bus.c, there is a possible double free due...7.8 High
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_security_descriptor_values_free function in...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can...7.0 High
- jpegoptim project jpegoptimjpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which...8.8 High
- upxPackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of...7.8 High
- openvpn, slackware linux +1 moreopenvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local...7.8 High
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument...8.8 High
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument...8.8 High
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreDouble free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by...7.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreA double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2....7.5 High
- huawei berkeley-al20 firmware, berkeley-bd firmware, huawei technologies co., ltd. berkeley-al20, berkeley-bd +2 moreThe Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20...5.5 Medium
- qualcomm ipq4019 firmware, mdm9206 firmware, mdm9607 firmware +16 more +18 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +23 more +25 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android...7.8 High
- cisco ios xeA vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software...6.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a...5.3 Medium
- huawei mate 9 pro, mate 9 pro firmware +1 moreHuawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON...7.8 High
- imagemagick, canonical ubuntu linux +1 moreWriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a...8.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- libgit2, debian linux +1 moreIncorrect returning of an error code in the index.c:read_entry() function leads to a double free...6.5 Medium
- cimgAn issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a...7.8 High
- gnu libcdioAn issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local...7.8 High
- underbit libmadThe mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote...9.8 Critical
- huawei technologies co., ltd. vicky-al00a, huawei vicky-al00a firmware +1 moreThe Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky...5.5 Medium
- gnu patchA double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...7.5 High
- linux kernelIn the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c...9.8 Critical
- lcdf gifsicleA double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker...7.8 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive...10.0 Critical
- cisco nx-osA vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent...7.4 High
- google androidIn the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- huawei mate 9 pro, huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 more +3 moreThe GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and...7.8 High
- Show moreLoading…