CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moretun: avoid double free in tun_free_netdev7.8 High
- linux, linux kernel +1 moreiio: core: fix ioctl handlers removal5.5 Medium
- linux, linux kernel +1 moremedia: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()7.8 High
- azure azure-uamqp-c, microsoft azure uamqp +1 moreAzure IoT Platform Device SDK Double Free Vulnerability9.8 Critical
- linux, linux kernel +1 moredm rq: fix double free of blk_mq_tag_set in dev remove after table load fails7.8 High
- linux, linux kernel +1 moreuio: Fix use-after-free in uio_open7.8 High
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The...9.8 Critical
- weston embedded uc-tcp-ipA double-free vulnerability exists in the IP header loopback parsing functionality of Weston...8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash7.5 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, qca6420 firmware +28 more +30 moreDouble Free in Data Network Stack & Connectivity6.7 Medium
- bytecodealliance webassembly micro runtimeBytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can...5.5 Medium
- broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 moreTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c5.5 Medium
- schedmd slurmAn issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,...9.8 Critical
- fortinet fortios, fortipam +1 moreA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1...8.3 High
- google androidIn multiple locations, there is a possible way to corrupt memory due to a double free. This could...7.8 High
- gpacGPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the...7.8 High
- nothings stb image.hDouble Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a...6.5 Medium
- nothings stb, stb vorbis.c +1 moreAttempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis7.3 High
- nothings stb, stb image, stb image.h +2 morePossible double-free or memory leak in stbi__load_gif_main in stb_image7.3 High
- nothings stb, stb image, stb image.h +2 moreDouble-free in stbi__load_gif_main_outofmem in stb_image7.3 High
- eprosima fast-dds, fast dds +1 moreMalformed DATA submessage leads to bad-free error in Fast-DDS8.6 High
- microsoft azure rtos guix studioAzure RTOS GUIX Studio Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +9 more +11 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- google android, mediatek mt6580, mt6739 +29 more +31 moreIn rpmb , there is a possible double free due to improper locking. This could lead to local...6.7 Medium
- samsung exynos 2200 firmwareSamsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2).4.7 Medium
- jtekt kostac plc, jtekt electronics corporation kostac plc programming software +1 moreDouble free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier....7.8 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE double free in shdr_verify_signature7.4 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: btrfs: double free in btrfs_get_root_ref()7.0 High
- mit kerberos 5kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is...8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- xhttp project xhttpxHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.7.5 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 for mac +3 more +5 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- qualcomm 205 firmware, 215 firmware, 315 5g firmware +272 more +274 moreDouble Free in Modem6.8 Medium
- hnswlib project hnswlibhnswlib Double Free vulnerability6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: double free within the handling of vmw_buffer_object objects6.7 Medium
- linux kernelA vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux...7.5 High
- openbsd libressl, openbsd +1 moreA double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Filtering Platform Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +6 more +8 moreWindows Geolocation Service Remote Code Execution Vulnerability7.8 High
- microsoft excel 2013 service pack 1, excel 2016, office 2019 +2 more +4 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- qualcomm csr8811 firmware, fastconnect 6200 firmware, ipq6000 firmware +53 more +55 moreDouble free in Linux Networking8.4 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +240 more +242 moreDouble free in Core8.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +118 more +120 moreDouble free in Automotive8.4 High
- qualcomm aqt1000 firmware, csrb31024 firmware, fastconnect 6200 firmware +75 more +77 moreDouble free in Linux-Android6.7 Medium
- intel server system d50tnp1mhcpac firmware, server system d50tnp1mhcrac firmware, server system d50tnp1mhcrlc firmware +7 more +9 moreDouble free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged...6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability8.1 High
- samsung android, samsung mobile devices +1 moreDouble free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May...6.0 Medium
- google androidIn adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free....7.8 High
- xmlsoft libxml2, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted...6.5 Medium
- Show moreLoading…