CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- c-aresc-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP7.5 High
gpacDebianGPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free4.8 Medium- open asset import library assimpOpen Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: double-free in read_layer_block()6.1 Medium
- zephyrproject zephyrNon-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unref6.4 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()7.5 High
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in iOS 26...6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morevfio/pci: Clean up DMABUFs before disabling function8.8 High
- linux, linux kernel +1 moremailbox: mailbox-test: don't free the reused channel7.8 High
- linux, linux kernel +1 moreidpf: fix double free and use-after-free in aux device error paths7.8 High
- linux, linux kernel +1 morenetdev: fix double-free in netdev_nl_bind_rx_doit()7.8 High
- linux, linux kernel +1 morePCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreice: fix double-free of tx_buf skb7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moretipc: fix double-free in tipc_buf_append()9.8 Critical
- curlSASL double-free9.8 Critical
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +23 more +25 moreOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service4.3 Medium
- alsa project alsa-libALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c7.0 High
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally call…7.5 High
- aws aws-c-httpHeap double-free in AWS Common Runtime aws-c-http8.7 High
- opensslDouble-free When Checking OCSP Stapled Response5.0 Medium
- linux, linux kernel +1 moremm/alloc_tag: clear codetag for pages allocated before page_ext initialization7.8 High
- strongswanIn strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion7.5 High
- rizinorg rizinRizin: Double free in cmd_search.c3.3 Low
- spearman unbounded-spscunbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race5.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path7.8 High
- linux, linux kernel +1 moremm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock7.8 High
- linux, linux kernel +1 morebtrfs: fix double free in create_space_info_sub_group() error path7.0 High
- linux, linux kernel +1 moreice: fix double free in ice_sf_eth_activate() error path7.8 High
- linux, linux kernel +1 morebtrfs: fix double free in create_space_info() error path7.8 High
- linux, linux kernel +1 moreext4: fix dirtyclusters double decrement on fs shutdown7.8 High
- linux, linux kernel +1 morenet: hns3: fix double free issue for tx spare buffer7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreRDMA/rxe: Fix double free in rxe_srq_from_init7.8 High
- puttyPuTTY 0.72 before 0.84 has a double free in RSA KEX.3.7 Low
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet/rds: reset op_nents when zerocopy page pin fails7.8 High
- netbsd srcNetBSD cryptodev Race Condition Double-Free via cryptodev_op()5.7 Medium
- gegl libbabllibbabl 0.1.62 Broken Double Free Detection Memory Safety9.3 Critical
- podofoPoDoFo: Double-free vulnerability in compute_hash_to_sign()2.5 Low
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Rich Text Edit Elevation of Privilege Vulnerability6.7 Medium
- microsoft 365 apps for enterprise, office 2016, office 2019 +31 more +33 moreWindows Rich Text Edit Elevation of Privilege Vulnerability6.7 Medium
- linux, linux kernel +1 morespi: rockchip-sfc: Fix double-free in remove() callback7.8 High
- linux, linux kernel +1 morescsi: qla2xxx: Completely fix fcport double free9.8 Critical
- linux, linux kernel +1 morecpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path7.8 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in net7.5 High
- linux, linux kernel +1 moredm: clear cloned request bio pointer when last clone bio completes7.8 High
- linux, linux kernel +1 morenet: mana: Fix double destroy_workqueue on service rescan PCI path7.8 High
- linux, linux kernel +1 morebnxt_en: Fix RSS context delete logic7.8 High
- linux, linux kernel +1 more9p/xen: protect xen_9pfs_front_free against concurrent calls8.8 High
- Show moreLoading…