VYPR

CWE-415

Double Free

VariantDraftLikelihood: High

Description

The product calls free() twice on the same memory address.

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (275)

page 1 of 14
  • CVE-2018-0101CriJan 29, 2018
    Cisco Systems, Inc.
    Adaptive Security Appliance (ASA) Software
    risk 0.75cvss 10.0epss 0.87

    A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an…

  • CVE-2018-4990HigKEVJul 9, 2018
    Adobe Inc.
    Acrobat
    risk 0.72cvss 8.8epss 0.41

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

  • CVE-2014-0502HigKEVFeb 21, 2014
    Adobe Inc.
    Air
    risk 0.71cvss 8.8epss 0.24

    Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before…

  • CVE-2003-0545CriNov 17, 2003
    OpenSSL Project
    OpenSSL
    risk 0.71cvss 9.8epss 0.85

    Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

  • CVE-2017-5334CriMar 24, 2017
    GNU
    Gnutls
    risk 0.66cvss 9.8epss 0.33

    Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.

  • CVE-2018-12782CriJul 20, 2018
    Adobe Inc.
    Acrobat
    risk 0.65cvss 9.8epss 0.11

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

  • CVE-2016-3132CriAug 7, 2016
    PHP
    PHP
    risk 0.65cvss 9.8epss 0.12

    Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index.

  • CVE-2005-1689CriJul 18, 2005
    Mit
    Kerberos 5
    risk 0.65cvss 9.8epss 0.11

    Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

  • CVE-2020-37239CriMay 16, 2026
    babl
    babl
    risk 0.64cvss 9.8epss 0.00

    libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_free() twice on the same pointer without triggering detection, as libc's malloc…

  • CVE-2026-33824CriApr 14, 2026
    Microsoft
    Windows IKE Extension
    risk 0.64cvss 9.8epss 0.56

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

  • CVE-2021-44732CriDec 20, 2021
    Arm
    MbedTLS
    risk 0.64cvss 9.8epss 0.03

    Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

  • CVE-2019-5481CriSep 16, 2019
    Curl
    Curl
    risk 0.64cvss 9.8epss 0.07

    Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

  • CVE-2018-17825CriOct 1, 2018
    Adplug
    Adplug
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.

  • CVE-2018-16402CriSep 3, 2018
    Elfutils Project
    Elfutils
    risk 0.64cvss 9.8epss 0.04

    libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.

  • CVE-2015-9165CriApr 18, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.64cvss 9.8epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, incorrect error handling could…

  • CVE-2018-3593CriApr 11, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.64cvss 9.8epss 0.01

    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD…

  • CVE-2017-18201CriFeb 26, 2018
    GNU
    Libcdio
    risk 0.64cvss 9.8epss 0.03

    An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.

  • CVE-2018-7263CriFeb 20, 2018
    Underbit
    Mad Libmad
    risk 0.64cvss 9.8epss 0.02

    The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.

  • CVE-2017-1000232CriNov 17, 2017
    Ldns
    ldns
    risk 0.64cvss 9.8epss 0.02

    A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.

  • CVE-2017-1000231CriNov 17, 2017
    Ldns
    ldns
    risk 0.64cvss 9.8epss 0.03

    A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.