CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelrpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.5.5 Medium
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at...7.8 High
- debian linux, genivi diagnostic log and trace +1 moreAn issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double...7.5 High
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreMemory corruption in multimedia driver due to double free while processing data from user in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +138 more +140 moreMemory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms...7.3 High
- google chrome, fedoraproject fedora +1 moreDouble free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...8.8 High
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893 +1 moreIn ccu, there is a possible memory corruption due to a double free. This could lead to local...6.7 Medium
- google androidIn ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free....9.8 Critical
- google androidIn closef of label_backends_android.c, there is a possible way to corrupt memory due to a double...7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization...7.8 High
- mi miuiThere is a pointer double free vulnerability in Some MIUI Services. When a function is called,...7.5 High
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.5.3 Medium
- ruby-lang rubyA double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2....9.8 Critical
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moredrivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free...7.8 High
- broadcom tcpreplayTcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.7.8 High
- autodesk navisworksA Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file...7.8 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moremcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a...7.8 High
- adobe bridgeAdobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability7.8 High
arrow2crates.ioArrow2 allows double free in `safe` codeNo score- osgeo shapelibA double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This...9.8 Critical
- google androidIn gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption...6.7 Medium
- saitoha libsixelIn libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in...6.5 Medium
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 moreA double-free was found in the way 389-ds-base handles virtual attributes context in persistent...7.5 High
- linux kernel, debian linux, netapp 8300 firmware +8 more +10 moreDouble Free in net/packet/af_packet.c leading to priviledge escalation6.6 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is...7.5 High
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in...5.5 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line...7.8 High
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in...5.5 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in...7.8 High
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function...7.8 High
- gpacThe binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del...5.5 Medium
- fig2dev project fig2dev, debian linux +1 moreA double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of...7.5 High
- huawei emui, magic ui +1 moreThere is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability...9.8 Critical
- gpacA Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of...5.5 Medium
- arm mbed tls, debian linux +1 moreMbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by...9.8 Critical
- huawei harmonyosThere is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful...7.5 High
- windriver vxworksAn issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted...6.5 Medium
- linux kernelLinux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability7.5 High
- softing opc, uatoolkit embedded, datafeed opc suite +4 more +6 moreAn issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and...7.5 High
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...7.1 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF...8.8 High
- google android, samsung mobile devices +1 moreAn improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows...4.4 Medium
- cisco ios xe software, ios xe, catalyst 9800 firmware +1 more +3 moreCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities8.6 High
- Show moreLoading…