CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- apple ios, ipados, macos +5 more +7 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 morePossibility of double free of the drawobj that is added to the drawqueue array of the context...7.8 High
- sys-info project sys-infoDouble free in sys-info9.8 Critical
- freerdp, debian linux, opensuse leap +2 moreDouble free in cliprdr_server_receive_capabilities in FreeRDP6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreDouble Free in FreeRDP2.2 Low
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability8.6 High
- opensc project openscOpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in...6.8 Medium
- google android, fedoraproject fedora +1 moreIn finalize of AssetManager.java, there is possible memory corruption due to a double free. This...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There...8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 High
- bitvec project bitvecUse after free and double free in bitvec9.8 Critical
- gnu patchGNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function...5.5 Medium
- videolabs libmicrodns, debian linux +1 moreAn exploitable code execution vulnerability exists in the label-parsing functionality of...9.8 Critical
- wago pfc200 firmwareAn exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality...7.8 High
- huawei campusinsight, manageone +1 moreThere is a double free vulnerability in some Huawei products. A local attacker with low privilege...3.3 Low
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, mdm9640 firmware +4 more +6 morePossible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon...7.8 High
- pablosoftwaresolutions quick \'n easy web serverThe HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote...7.5 High
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 morePossibility of use-after-free and double free because of not marking buffer as NULL after freeing...7.8 High
- denx u-boot, opensuse leap +1 moreIn Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts(...9.8 Critical
- virglrenderer project virglrenderer, debian linux +1 moreA double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers...5.5 Medium
- cesnet libyangA double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization...8.8 High
- cesnet libyangA double-free is present in libyang before v1.0-r3 in the function yyparse() when a type...8.8 High
- cesnet libyangA double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty...8.8 High
- systrace project systraceSystrace before 1.6.0 has insufficient escape policy enforcement.9.8 Critical
- google androidIn export_key_der of export_key.cpp, there is possible memory corruption due to a double free....7.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.8.8 High
- php, debian linux, fedoraproject fedora +1 more +3 moremail() may release string with refcount==1 twice6.5 Medium
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePotential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +31 more +33 moreMemory is being freed up twice when two concurrent threads are executing in parallel in...7.8 High
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 moresysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, ipq4019 firmware +14 more +16 morePossible double free issue in kernel while handling the camera sensor and its sub modules power...7.8 High
- hyper httpDouble free in http9.8 Critical
- huawei emily-al00a firmware, emily-l09c firmware, emily-l29c firmware +4 more +6 moreBastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182...7.8 High
- google blink, chrome +1 moreAn issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in...6.5 Medium
- google blink, chrome +1 moreA double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore:...7.5 High
- psutil project psutilDouble Free in psutil7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +11 more +13 moreDouble free issue can happen when sensor power settings is freed by some thread while another...9.8 Critical
- osgeo gdal, debian linux, fedoraproject fedora +3 more +5 moreGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the...9.8 Critical
- android-gif-drawable project android-gif-drawable, whatsapp +1 moreandroid-gif-drawable Double Free vulnerability8.8 High
- linea project lineaDouble free in linea9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Critical
- google androidIn GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is...7.8 High
- linux kernel, opensuse leap +1 moreAn issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the...7.8 High
- nmapnse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when...7.5 High
- linux kernel, canonical ubuntu linux +1 moredrivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions, 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...9.8 Critical
- google android, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a...4.6 Medium
- Show moreLoading…