CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- chromium libwebpUse after free in libwebp5.3 Medium
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0 +6 more +8 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 moreDouble free in Core9.3 Critical
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 morehci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after...7.8 High
- linux kernelA double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a...7.8 High
- google tensorflowTensorFlow has double free in Fractional(Max/Avg)Pool8.0 High
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 Medium
- gpacGPAC av_parsers.c gf_av1_reset_state double free5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Media Remote Code Execution Vulnerability7.8 High
- linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function...4.7 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +157 more +159 moreDouble free in Video7.3 High
- google androidIn Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double...7.8 High
- sudo project sudo, fedoraproject fedora +1 moreSudo before 1.9.13p2 has a double free in the per-command chroot feature.7.2 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreIn the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an...4.7 Medium
- cisco clamavClamAV Double-free Vulnerability in the OLE2 File Parser8.6 High
- fortinet fortiwebA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute...7.1 High
- altran picotcp, picotcp-ng +1 moreDouble Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules...9.8 Critical
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreDouble free after calling PEM_read_bio_ex7.5 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...6.5 Medium
- zephyrproject zephyrBluetooth HCI Error Handling Double Free9.8 Critical
- huawei emui, harmonyos +1 moreThe DUBAI module has a double free vulnerability.Successful exploitation of this vulnerability...7.5 High
- qualcomm apq8096au firmware, aqt1000 firmware, mdm9150 firmware +43 more +45 moreUse-After-Free Issue in Display6.7 Medium
- heimdal project heimdal, samba +1 moreCVE-2022-44640 affecting package samba for versions less than 4.18.3-19.8 Critical
- linux kernelA double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount...7.8 High
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6893, mt6983, mt8168, mt8365, mt8797, mt8798 +1 moreIn audio, there is a possible memory corruption due to a logic error. This could lead to local...6.7 Medium
- diplibdiplib Double Free6.5 Medium
- linux kernel, redhat enterprise linux +1 moreA double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers...5.5 Medium
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreA double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality...7.5 High
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can...7.8 High
- linux kernelLinux Kernel CIFS sess.c sess_free_buffer double free3.5 Low
- qualcomm, inc. snapdragon mobile, qualcomm kailua firmware, sg8275 firmware +13 more +15 moreMemory corruption in BTHOST due to double free while music playback and calls over bluetooth...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +91 more +93 moreMemory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute,...7.8 High
- huawei emui, harmonyos, magic ui +2 moreDouble free vulnerability in the storage module. Successful exploitation of this vulnerability...9.8 Critical
- rizinRizin Double Free in bobj.c when using qnx binary plugin7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 moreMemory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,...7.3 High
- libdwarf project libdwarf, fedoraproject fedora +1 morelibdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.8.8 High
- libtiff, debian linux +1 moreThere is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc16.5 Medium
- radare radare2A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation...9.1 Critical
- hjiang jsonxx, json\+\+ +1 moreDouble free or Use after Free in Value class of Jsonxx8.1 High
- linux, linux kernel, canonical ubuntu linux +1 more +3 moreImportant: kernel security, bug fix, and enhancement update5.3 Medium
- nvidia virtual gpu, virtual gpu software and nvidia cloud gaming +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it...7.0 High
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...7.5 High
- autodesk design reviewA Double Free vulnerability allows remote attackers to execute arbitrary code through...8.8 High
- simplenetwork project simplenetworkSimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to...7.5 High
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreUse-after-free in io_uring ad work_flags in Linux Kernel7.5 High
- hinet hicos’ client-side citizen digital certificate, hicos natural person credential component client +1 moreHiCOS’ client-side citizen digital certificate - Double Free6.8 Medium
- ultrajson, fedoraproject fedora +1 moreDouble free of buffer during string decoding in ujson5.9 Medium
- offis dcmtkDCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but...7.5 High
- linux kernelrpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4...5.5 Medium
- Show moreLoading…