CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- adplug project adplug, fedoraproject fedora +1 moreDouble Free in Adplug9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +29 more +31 moreMicrosoft Graphics Remote Code Execution Vulnerability8.8 High
- huawei emily-l29c, emily-l29c firmware +1 moreHuawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10)...6.3 Medium
- linux kernelIn the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of...9.8 Critical
- denx u-bootDas U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when...7.8 High
- docker docker-credential-helpers, canonical ubuntu linux, docker credential helpers +1 more +3 moredocker-credential-helpers before 0.6.3 has a double free in the List functions.5.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreA double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An...7.0 High
- radare radare2In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8064 firmware, mdm9150 firmware +40 more +42 moreThe txrx stats req might be double freed in the pdev detach when the host driver is unloading in...5.5 Medium
- opensuse backports, leap, videolan vlc media player +2 moreDouble Free in VLC versions <= 3.0.6 leads to a crash.5.5 Medium
- videolan vlc media playerAn issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC...9.8 Critical
- androidIn EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free....7.8 High
- huawei mate10, mate 10 firmware +1 moreThere is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions...5.5 Medium
- huawei mate 10, mate 10 firmware +1 moreThe image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159...5.5 Medium
- servo smallvecDouble free in smallvec9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +36 more +38 morePossibility of double free issue while running multiple instances of smp2p test because of proper...7.8 High
- webmproject libwebpIn libwebp 0.5.1, there is a double free bug in libwebpmux.7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...9.8 Critical
- libsdl simple directmedia layer, sdl2 image +1 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...8.8 High
- nmap npcapAn issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter...7.8 High
- google chromeDouble free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...7.5 High
- gnu gnutls, fedoraproject fedora +1 moreA vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double...5.3 Medium
- getcujo smart firewallAn exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall....8.3 High
- intel software guard extensions sdk, intel corporation intel(r) software guard extensions sdk +1 moreDouble free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows...7.1 High
- android, canonical ubuntu linux, debian linux +2 moreIn binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper...7.8 High
- libgd, canonical ubuntu linux, debian linux +2 moreThe GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in...9.8 Critical
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function...6.5 Medium
- libxls project libxlsThe read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause...6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- libarchive, canonical ubuntu linux, debian linux +4 more +6 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...8.8 High
- qt, debian linux, opensuse leap +2 moreQXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially...8.8 High
- crossbeam project crossbeamDouble free in crossbeam9.8 Critical
- google androidIn MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial...5.7 Medium
- google androidIn bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free....9.8 Critical
- gnu gettext, canonical ubuntu linux, redhat enterprise linux +2 moreAn issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in...9.8 Critical
- gnome gthumb, debian linux +1 moreAn issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 430 firmware +5 more +7 moreDouble memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Denial of Service Vulnerability6.8 Medium
- google androidIn copy_process of fork.c, there is possible memory corruption due to a double free. This could...7.8 High
- atlantiswordprocessor atlantis word processorAn exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word...8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAn issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +26 more +28 moreIn Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655,...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- Show moreLoading…