CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities8.6 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec...8.8 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm apq8017 firmware, apq8053 firmware +95 more +97 morePossible memory corruption due to improper check when application loader object is explicitly...8.4 High
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in tvOS 14...7.8 High
- libgd** DISPUTED ** gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has...7.5 High
- cisco video surveillance 7000 series ip cameras, video surveillance 7000 ip camera firmware +1 moreCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability6.5 Medium
- google tensorflowUse after free in boosted trees creation in TensorFlow7.8 High
- huawei emui, magic ui +1 moreA component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit...7.0 High
- huawei harmonyosA component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this...7.8 High
- debian linux, linux kernel, oracle communications cloud native core binding support function +2 more +4 morehso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls...6.4 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 moreMemory corruption in key parsing and import function due to double freeing the same heap...8.4 High
- autodesk design reviewDouble Free File Parsing Vulnerability in Autodesk Design Review8.1 High
- mrubymruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).7.8 High
- treasuredata fluent bitFluent Bit (aka fluent-bit) 1.7.0 through 1.7,4 has a double free in flb_free (called from...9.8 Critical
- gnu libredwgGNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from...8.8 High
- google androidIn encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double...5.5 Medium
- mackron miniaudioMiniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in...9.8 Critical
- htmldoc project htmldocA flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may...9.8 Critical
- google chrome, fedoraproject fedora +1 moreDouble free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...8.8 High
- google androidIn memory management driver, there is a possible memory corruption due to a double free. This...7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreA flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was...5.5 Medium
- radare radare2, fedoraproject fedora +1 moreIn radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file...5.5 Medium
- c-ares, fedoraproject fedora +1 moreA possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is...3.3 Low
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 moreDouble free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon...7.3 High
- google androidIn memory management driver, there is a possible memory corruption due to a double free. This...7.8 High
- google androidIn rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data....8.8 High
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attack…6.5 Medium
- canonical ubuntu linux, ubuntu linux kernel +1 moreUbuntu linux kernel shiftfs file system double free vulnerability8.8 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter...9.8 Critical
- rust-lang rustIn the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the...9.8 Critical
- freebsdIn FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8037 firmware +315 more +317 moreA double free condition can occur when the device moves to suspend mode during secure playback in...8.4 High
- google androidIn setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +213 more +215 moreTwo threads call one or both functions concurrently leading to corruption of pointers and...6.7 Medium
- algorithmica project algorithmicaDouble free in algorithmica7.5 High
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...7.1 High
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a...7.8 High
- google androidIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double...9.8 Critical
- google androidIn main of main.cpp, there is a possible memory corruption due to a double free. This could lead...7.8 High
- id-map project id-mapDouble-free in id-map9.8 Critical
- id-map project id-mapDouble-free in id-map9.8 Critical
- id-map project id-mapDouble-free in id-map9.8 Critical
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...2.5 Low
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...5.5 Medium
- stack dst project dstDrop of uninitialized memory in stack_dst9.8 Critical
- Show moreLoading…