CWE-415: Double Free
The product calls free() twice on the same memory address.
Also known as Double-free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- freerdpFreeRDP before 3.32.0 Double Free via NSCodec plane growth failure8.2 High
- google gvisorCode Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile8.5 High
- xerial snappy-javaXerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream6.3 Medium
- omniosDouble free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon5.4 Medium
- falkordbDouble free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB9.3 Critical
- openprinting cupsOpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add...2.3 Low
- the xorg project xorg-x11-server, x.org xwayland +1 moreX.Org Server XKB SetGeometry TextDoodad Double Free7.8 High
- imagemagickImageMagick: Use-After-Free in RSVG decoder that is build without cairo support5.9 Medium
- mediatek mt6899 firmware, mt6993 firmware, mt8668 firmware +3 more +5 moreIn apu, there is a possible application crash due to double free. This could lead to local denial...6.2 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an...7.8 High
- linux, linux kernel +1 morenvme-rdma: fix -EIO cleanup order in queue_rq7.0 High
- gitlabDouble Free in GitLab9.9 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software7.8 High
- lwip apiDouble Free in lwIP (lightweight IP)8.7 High
- rti connext professionalDouble Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.6.9 Medium
- zephyrproject zephyrDouble free of the USB host configuration descriptor when device enumeration fails5.7 Medium
- cisco secure firewall threat defense (ftd) softwareCisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability8.6 High
- apple macosA double free issue was addressed with improved memory management. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in iOS 26...9.8 Critical
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability8.2 High
- samsung exynos 1280 firmwareAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400,...4.2 Medium
- samsung exynos 850 firmwareAn issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850,...7.8 High
- freebsd, netbsd netbsdNetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen7.3 High
- google chromeDouble free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...8.8 High
- cyrus imap, cyrusimap cyrus imap +1 moreAn issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An...4.2 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Double Free (CWE-415)7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Print Spooler Components Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Display Enhancement Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +9 more +11 moreWindows Hello Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Graphics Component Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Credential Guard Elevation of Privilege Vulnerability8.2 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows Failover Cluster Elevation of Privilege Vulnerability6.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Audio Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Registry Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreRemote Desktop Gateway Service Elevation of Privilege Vulnerability7.0 High
- microsoft exchange server, exchange server subscription edition, exchange server 2019 cumulative update 14 +2 more +4 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.1 High
- openvpn ovpn-dco-winA use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6...6.8 Medium
- mediatek, inc. mediatek chipsetIn camera middleware, there is a possible escalation of privilege due to double free. This could...6.7 Medium
- mongodb c driverHeap corruption via OCSP request double free from crafted multi-URL certificate in TLS client8.2 High
- kamailioAn issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via...7.5 High
- valkey-io valkeyvalkey-io valkey Module Timer module.c moduleTimerHandler double free4.8 Medium
- watchguard fireware osFireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)8.7 High
- Show moreLoading…