CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- hiawatha.leisink hiawatha webserver, hiawatha web server +1 moreDouble free in XSLT in 'show_index'6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes8.7 High
- schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 moreCWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end...8.4 High
- huawei harmonyosDouble free vulnerability in the multi-mode input module. Impact: Successful exploitation of this...7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability7.8 High
- espressif esp-usb, usb host hid driver +1 moreespressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path6.4 Medium
- cisco secure firewall threat defense (ftd) software, utd snort ips engine software +1 moreMultiple Cisco Products Snort 3 DCERPC Vulnerabilities5.8 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreDouble Free in Graphics7.8 High
- qualcomm cologne firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +17 more +19 moreDouble Free in Video7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn seninf, there is a possible memory corruption due to a race condition. This could lead to...7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- imagemagickImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family4.9 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8186, mt8188, mt8196, mt8667, mt8673, mt8676, mt8678, mt8765, mt8766, mt8768, mt8771, mt8781, mt8791t, mt8792, mt8793, mt8795t, mt8796, mt8798, mt8873, mt8883 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8186, mt8188, mt8196, mt8667, mt8673, mt8676, mt8678, mt8765, mt8766, mt8768, mt8771, mt8781, mt8791t, mt8792, mt8793, mt8795t, mt8796, mt8798, mt8873, mt8883 +1 moreIn display, there is a possible memory corruption due to use after free. This could lead to local...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8113, mt8115, mt8139, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8512, mt8516, mt8518, mt8519, mt8532, mt8676, mt8678, mt8695, mt8696, mt8698 +1 more +3 moreIn aee daemon, there is a possible system crash due to a race condition. This could lead to local...4.7 Medium
- google androidIn aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This...7.8 High
- jarun nnnjarun nnn nnn.c run_cmd_as_plugin double free4.8 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreMicrosoft Wireless Provisioning System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Smart Card Reader Elevation of Privilege Vulnerability7.8 High
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in macOS...5.5 Medium
- f5 big-ip, big-ip next cnf, big-ip next for kubernetes +24 more +26 moreTMM vulnerability8.7 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.0 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a...7.0 High
- linux, linux kernel +1 morejfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount7.8 High
- linux, linux kernel +1 moremedia: dvb-core: Fix double free in dvb_register_device()7.8 High
- debian linux, linux kernel +1 moretracing: Silence warning when chunk allocation fails in trace_pid_write5.5 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +27 more +29 moreDouble Free in Video7.8 High
- debian linux, linux kernel +1 moredmaengine: idxd: Fix double free in idxd_setup_wqs()7.8 High
- broadcom tcpreplayWithin tcpreplay's tcprewrite, a double free vulnerability has been identified in the...7.8 High
- ffmpegFfmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend3.3 Low
- linux, linux kernel +1 moreBluetooth: hci_sysfs: Fix attempting to call device_add multiple times8.8 High
- linux, linux kernel +1 morenfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure9.8 Critical
- linux, linux kernel +1 moreNFSv4.2: Rework scratch handling for READ_PLUS (again)9.8 Critical
- linux, linux kernel +1 morenet: fec: Better handle pm_runtime_get() failing in .remove()7.8 High
- bmc control-m/agentBMC Control-M/Agent memory corruption in SSL/TLS communication8.4 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix double free on tx path.7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morebus: mhi: host: Detect events pointing to unexpected TREs8.4 High
- linux, linux kernel +1 moredrm/xe: Fix vm_bind_ioctl double free bug7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morescsi: bfa: Double-free fix7.8 High
- linux, linux kernel +1 morei2c: core: Fix double-free of fwnode in i2c_unregister_device()7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'7.8 High
- linux, linux kernel +1 moreRDMA/hns: Fix double destruction of rsv_qp7.8 High
- santesoft sante pacs serverSantesoft Sante PACS Server Double Free8.7 High
- Show moreLoading…