CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- mongodb bi connectorMongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination8.2 High
- opensslQUIC Server May Trigger Double Free When Processing INITIAL Packet7.5 High
- imagination technologies graphics ddkGPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`5.5 Medium
- linuxdm_early_create: fix freeing used table on dm_resume failure7.8 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control5.9 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows Autopilot Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Kerberos Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Network Connection Broker Elevation of Privilege Vulnerability7.0 High
- zephyrproject zephyrDouble-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error paths5.9 Medium
- zephyrproject zephyrDouble free / use-after-free in Bouffalo Lab HCI driver send() error paths (hci_bflb)5.9 Medium
- linuxdrm/amd/display: set new_stream to NULL after release7.8 High
- linuxwifi: brcmfmac: make release_scratchbuffers idempotent8.8 High
- cisco secure endpointClamAV ZIP File Format Processing Memory Corruption Vulnerability7.5 High
- ggml llama.cppllama.cpp b1886–b7445 Double Free via llama-android.cpp8.5 High
- linuxcrypto: amlogic - avoid double cleanup in meson_crypto_probe()7.8 High
- linuxsmb: client: fix double-free in SMB2_close() replay9.8 Critical
- linuxxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 High
- linux, linux kernel +1 morewifi: mac80211: fix fils_discovery double free on alloc failure7.8 High
- multiple open source open-iscsiDouble-free in the iSNS attribute decoder in open-iscsi8.7 High
- freerdpFreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU7.1 High
- hdfgroup hdf5Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field4.0 Medium
- linuxnvmet-tcp: Fix potential UAF when ddgst mismatch9.8 Critical
- linux, linux kernel +1 morestaging: media: ipu7: fix double-free and use-after-free in error paths7.8 High
- linux, linux kernel +1 moresmb: client: fix query directory replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix query_info() replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_ioctl() replay9.8 Critical
- linux, linux kernel +1 moresmb: client: fix change notify replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_flush() replay9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_open() replay8.8 High
- linux, linux kernel +1 morecpufreq: qcom-cpufreq-hw: Fix possible double free7.8 High
- redisRedis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...7.5 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Double-Free Heap Corruption via sftp_open()8.7 High
- linux, linux kernel +1 moreusb: gadget: net2280: Fix double free in probe error path7.8 High
- linux, linux kernel +1 moreocteontx2-pf: fix double free in rvu_rep_rsrc_init()7.8 High
- linux, linux kernel +1 moreocteontx2-pf: avoid double free of pool->stack on AQ init failure7.0 High
- apple swift-cryptoRed Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update7.5 High
- ffmpegFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c8.7 High
- freerdpFreeRDP before 3.28.0 Double-Free via selectedmonitors9.3 Critical
- linux, linux kernel +1 moreqed: fix double free in qed_cxt_tables_alloc()8.4 High
- linux, linux kernel +1 morenet: shaper: reject duplicate leaves in GROUP request7.8 High
- linux, linux kernel +1 moreuio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory7.8 High
- linux, linux kernel +1 morescsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Critical
- linux, linux kernel +1 morewifi: ath11k: fix warning when unbinding7.8 High
- toddr yaml::syckYAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack6.2 Medium
- microsoft word, 365 apps, 365 apps for enterprise +14 more +16 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +11 more +13 moreWindows DHCP Server Remote Code Execution Vulnerability7.5 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Print Configuration Elevation of Privilege Vulnerability7.8 High
- rockwell automation the flex 5000® ethernet/ip adapterRockwell Automation Flex 5000® Adapter - Denial of Service8.7 High
- Show moreLoading…