CWE-415 · Double Free (page 3)
Page 3 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38186 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() Before the commit unde… |
CVE-2025-5351 | Medium | 6.5 | 2025-07-04 | A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serial… |
CVE-2022-50164 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue After successfull st… |
CVE-2022-50115 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes We ha… |
CVE-2022-49990 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork() failure The pointers for guarded storage… |
CVE-2025-38079 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type… |
CVE-2025-38069 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a kernel oops… |
CVE-2025-23096 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. |
CVE-2025-23095 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. |
CVE-2025-23102 | High | 8.8 | 2025-06-03 | An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads t… |
CVE-2025-5262 | High | 7.5 | 2025-05-27 | A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memo… |
CVE-2025-5100 | High | 8.0 | 2025-05-23 | A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code… |
CVE-2025-37991 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash… |
CVE-2025-37933 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat message… |
CVE-2025-37915 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37914 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37913 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-4574 | Medium | 6.5 | 2025-05-13 | In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free tha… |
CVE-2025-31241 | Medium | 5.3 | 2025-05-12 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS So… |
CVE-2025-31235 | Medium | 6.5 | 2025-05-12 | A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura… |
CVE-2025-37817 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_devi… |
CVE-2022-49900 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4_remove() In piix4_probe(), the piix4 adap… |
CVE-2022-49826 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in… |
CVE-2022-49789 | High | 7.0 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong… |
CVE-2022-49775 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able t… |
CVE-2025-37779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed moun… |
CVE-2025-27730 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-26640 | High | 7.0 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-2925 | Low | 3.3 | 2025-03-28 | A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c… |
CVE-2025-2027 | | 2025-03-28 | A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC… | |
CVE-2023-52930 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple threads racing I915_… |
CVE-2022-43454 | High | 7.8 | 2025-03-10 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2… |
CVE-2024-53698 | Medium | 4.9 | 2025-03-07 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers wh… |
CVE-2025-21825 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT During the update proced… |
CVE-2024-58055 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately Don't prematurely free the command. Wa… |
CVE-2024-57980 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to… |
CVE-2022-49686 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcg_video_pump A panic can occur if the endpoin… |
CVE-2022-49541 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential double free during failed mount RHBZ: https://bugzilla.redhat.com/sho… |
CVE-2022-49530 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table()… |
CVE-2022-49519 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10k_halt during suspend for driver state RESTARTING Double free crash is… |
CVE-2022-49508 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resour… |
CVE-2022-49455 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxl_file_register_afu info_release() will be cal… |
CVE-2022-49410 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref(… |
CVE-2022-49391 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtk_scp: Fix a potential double free 'scp->rproc' is allocated using devm_rpr… |
CVE-2022-49384 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: md: fix double free of io_acct_set bioset Now io_acct_set is alloc and free in personalit… |
CVE-2022-49290 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 ("mac80211: me… |
CVE-2022-49205 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix double uncharge the mem of sk_msg If tcp_bpf_sendmsg is running during… |
CVE-2022-49203 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams [Why] The issue only occu… |
CVE-2021-47638 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ubifs: rename_whiteout: Fix double free for whiteout_ui->data 'whiteout_ui->data' will be… |
CVE-2025-21201 | High | 8.8 | 2025-02-11 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2025-21183 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21182 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2024-39564 | High | 7.5 | 2025-02-05 | This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon (rpd) of J… |
CVE-2025-21673 | Critical | 9.8 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server i… |
CVE-2025-21291 | High | 8.8 | 2025-01-14 | Windows Direct Show Remote Code Execution Vulnerability |
CVE-2024-56775 | High | 7.8 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore… |
CVE-2024-56766 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was convert… |
CVE-2024-35365 | High | 8.8 | 2025-01-03 | FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function. |
CVE-2024-56708 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens beca… |
CVE-2024-56704 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct de… |
CVE-2024-56699 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci… |
CVE-2024-53213 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_prob… |
CVE-2024-53191 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization… |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-53133 | High | 7.8 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash [Why] In the case where a d… |
CVE-2024-12107 | High | 7.5 | 2024-12-04 | Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS |
CVE-2024-35368 | Critical | 9.8 | 2024-11-29 | FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. |
CVE-2024-11704 | Critical | 9.8 | 2024-11-26 | A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key c… |
CVE-2024-50276 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wi… |
CVE-2024-10934 | Critical | 9.8 | 2024-11-15 | In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninit… |
CVE-2024-47426 | High | 7.8 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2024-49014 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-43640 | High | 7.8 | 2024-11-12 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-43447 | High | 8.1 | 2024-11-12 | Windows SMBv3 Server Remote Code Execution Vulnerability |
CVE-2024-50235 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear wdev->cqm_config pointer on free When we free wdev->cqm_config when… |
CVE-2024-50215 | High | 8.1 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across… |
CVE-2024-50159 | High | 7.0 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() Clang static check… |
CVE-2024-50152 | Critical | 9.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix possible double free in smb2_set_ea() Clang static checker(scan-build) w… |
CVE-2024-47404 | High | 8.4 | 2024-11-05 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double f… |
CVE-2024-3935 | Medium | 6.5 | 2024-10-30 | In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connectio… |
CVE-2024-50071 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() 'new_map' is al… |
CVE-2024-44098 | High | 7.4 | 2024-10-25 | In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of… |
CVE-2024-50055 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any er… |
CVE-2024-49989 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during amdgpu module unload Flexible endpoints use… |
CVE-2024-49983 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free When calling ext4_… |
CVE-2024-49882 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), s… |
CVE-2024-49853 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between pro… |
CVE-2024-3187 | Medium | 5.9 | 2024-10-17 | This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not… |
CVE-2024-45402 | High | 8.6 | 2024-10-11 | Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, pic… |
CVE-2024-43514 | High | 7.8 | 2024-10-08 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-23379 | Medium | 6.7 | 2024-10-07 | Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. |
CVE-2024-20498 | High | 8.6 | 2024-10-02 | Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthentica… |
CVE-2024-46741 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrp… |
CVE-2024-46736 | Critical | 9.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_rename_path() If smb2_set_path_attr() is ca… |
CVE-2024-46687 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() [BUG] There i… |
CVE-2024-46673 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific i… |
CVE-2024-38247 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-7256 | Medium | 4.4 | 2024-08-31 | In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo… |
CVE-2022-48919 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails… |
CVE-2022-48892 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1d4e8 ("sch… |