CWE-415
Double Free
Description
The product calls free() twice on the same memory address.
Hierarchy (View 1000)
CVEs mapped to this weakness (886)
page 7 of 45| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21201 | Hig | 0.57 | 8.8 | 0.02 | Feb 11, 2025 | Windows Telephony Server Remote Code Execution Vulnerability | ||
| CVE-2025-21291 | Hig | 0.57 | 8.8 | 0.01 | Jan 14, 2025 | Windows Direct Show Remote Code Execution Vulnerability | ||
| CVE-2024-49014 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2022-48919 | Hig | 0.57 | 8.8 | 0.00 | Aug 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free() which will free… | ||
| CVE-2024-41073 | Cri | 0.57 | 9.8 | 0.01 | Jul 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECIAL_LOAD when the… | ||
| CVE-2024-38087 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-30013 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | Windows MultiPoint Services Remote Code Execution Vulnerability | ||
| CVE-2024-30097 | Hig | 0.57 | 8.8 | 0.02 | Jun 11, 2024 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability | ||
| CVE-2024-35856 | Hig | 0.57 | 8.8 | 0.00 | May 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. … | ||
| CVE-2023-38562 | Hig | 0.57 | 8.7 | 0.01 | Feb 20, 2024 | A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of… | ||
| CVE-2023-41678 | Hig | 0.57 | 8.8 | 0.01 | Dec 13, 2023 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request. | ||
| CVE-2022-27864 | Hig | 0.57 | 8.8 | 0.01 | Jul 29, 2022 | A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a… | ||
| CVE-2022-2008 | Hig | 0.57 | 8.8 | 0.01 | Jul 28, 2022 | Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2021-39528 | Hig | 0.57 | 8.8 | 0.01 | Sep 20, 2021 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. | ||
| CVE-2021-30535 | Hig | 0.57 | 8.8 | 0.01 | Jun 7, 2021 | Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2020-36318 | Cri | 0.57 | 9.8 | 0.02 | Apr 11, 2021 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free. | ||
| CVE-2021-28034 | Cri | 0.57 | 9.8 | 0.01 | Mar 5, 2021 | An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic. | ||
| CVE-2021-28031 | Cri | 0.57 | 9.8 | 0.01 | Mar 5, 2021 | An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function. | ||
| CVE-2021-28028 | Cri | 0.57 | 9.8 | 0.01 | Mar 5, 2021 | An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic. | ||
| CVE-2019-20014 | Hig | 0.57 | 8.8 | 0.01 | Dec 27, 2019 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. |
- risk 0.57cvss 8.8epss 0.02
Windows Telephony Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Windows Direct Show Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free() which will free…
- risk 0.57cvss 9.8epss 0.01
In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECIAL_LOAD when the…
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows MultiPoint Services Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. …
- risk 0.57cvss 8.7epss 0.01
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of…
- risk 0.57cvss 8.8epss 0.01
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.
- risk 0.57cvss 8.8epss 0.01
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a…
- risk 0.57cvss 8.8epss 0.01
Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.
- risk 0.57cvss 8.8epss 0.01
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- risk 0.57cvss 9.8epss 0.02
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
- risk 0.57cvss 9.8epss 0.01
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.
- risk 0.57cvss 9.8epss 0.01
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.
- risk 0.57cvss 9.8epss 0.01
An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.