CWE-415 · Double Free (page 4)
Page 4 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38157 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-42234 | High | 7.8 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been se… |
CVE-2024-41965 | Medium | 4.2 | 2024-08-01 | Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do w… |
CVE-2024-41957 | Medium | 4.5 | 2024-08-01 | Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will… |
CVE-2024-42147 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process… |
CVE-2024-42138 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case… |
CVE-2024-42123 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_time… |
CVE-2023-52888 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driv… |
CVE-2024-41087 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_… |
CVE-2024-41073 | Critical | 9.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and tha… |
CVE-2024-41046 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently release… |
CVE-2024-40940 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow… |
CVE-2024-38087 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-30013 | High | 8.8 | 2024-07-09 | Windows MultiPoint Services Remote Code Execution Vulnerability |
CVE-2024-21461 | High | 8.4 | 2024-07-01 | Memory corruption while performing finish HMAC operation when context is freed by keymaster. |
CVE-2024-23141 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. This vulnerability, along with other vulnera… |
CVE-2024-39292 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is r… |
CVE-2024-38627 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&stm->dev) call will… |
CVE-2022-48740 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list()… |
CVE-2021-47589 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_netdev() fails, the… |
CVE-2024-36973 | High | 8.4 | 2024-06-17 | In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() Wh… |
CVE-2024-30097 | High | 8.8 | 2024-06-11 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-36940 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocate… |
CVE-2024-36030 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) w… |
CVE-2021-47564 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in pres… |
CVE-2021-47483 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcache_rbtree_exit() In regcache_rbtree_insert_to_b… |
CVE-2024-27127 | High | 7.2 | 2024-05-21 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users… |
CVE-2023-52851 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unl… |
CVE-2023-52795 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix use after free in vhost_vdpa_probe() The put_device() calls vhost_vdpa_re… |
CVE-2023-52739 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in __free_pages When we upgraded our kernel, we… |
CVE-2021-47304 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized This commit fixes a bug (fo… |
CVE-2024-35856 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would f… |
CVE-2024-35847 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_d… |
CVE-2023-52691 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_stat… |
CVE-2023-52688 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws e… |
CVE-2023-52679 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map()… |
CVE-2024-35835 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails… |
CVE-2024-35814 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103… |
CVE-2023-52667 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g s… |
CVE-2023-52664 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in r… |
CVE-2024-27433 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()… |
CVE-2024-30027 | High | 7.8 | 2024-05-14 | NTFS Elevation of Privilege Vulnerability |
CVE-2023-44247 | Medium | 6.6 | 2024-05-14 | A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafte… |
CVE-2023-52384 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52383 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2021-34981 | Medium | 6.7 | 2024-05-07 | Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2024-27392 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() When nvme_identify_n… |
CVE-2024-27389 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: pstore: inode: Only d_invalidate() is needed Unloading a modular pstore backend with reco… |
CVE-2024-26932 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() When unregister pd c… |
CVE-2024-26930 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential… |
CVE-2022-48649 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug test, kfence… |
CVE-2024-26893 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in SMC transport cleanup path When the generic SCMI c… |
CVE-2024-26846 | Medium | 4.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between… |
CVE-2024-3446 | High | 8.2 | 2024-04-09 | A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently… |
CVE-2024-26257 | High | 7.8 | 2024-04-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-26792 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after snapshot creation failure When creating… |
CVE-2024-26782 | Critical | 9.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connecti… |
CVE-2024-26748 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if (request->complete) { … |
CVE-2024-26704 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), mo… |
CVE-2024-26694 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done l… |
CVE-2024-26653 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary_device_add() retur… |
CVE-2024-26652 | Medium | 4.1 | 2024-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add(… |
CVE-2024-2002 | High | 7.5 | 2024-03-18 | A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially cau… |
CVE-2021-47123 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_lin… |
CVE-2024-21445 | High | 7.0 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2021-47082 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_free_netdev() by movin… |
CVE-2021-46979 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: iio: core: fix ioctl handlers removal Currently ioctl handlers are removed twice. For the… |
CVE-2020-36785 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_buf" is free… |
CVE-2024-27099 | Critical | 9.8 | 2024-02-27 | The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free pr… |
CVE-2021-46938 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loadin… |
CVE-2023-52439 | High | 7.8 | 2024-02-20 | In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------… |
CVE-2024-23809 | Critical | 9.8 | 2024-02-20 | A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A… |
CVE-2024-22097 | Critical | 9.8 | 2024-02-20 | A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specia… |
CVE-2023-38562 | High | 8.7 | 2024-02-20 | A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network pa… |
CVE-2024-21606 | High | 7.5 | 2024-01-12 | A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker… |
CVE-2023-1032 | Medium | 4.7 | 2024-01-08 | The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in… |
CVE-2022-2588 | Medium | 5.3 | 2024-01-08 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handl… |
CVE-2023-28583 | Medium | 6.7 | 2024-01-02 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address. |
CVE-2023-52284 | Medium | 5.5 | 2023-12-31 | Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly… |
CVE-2023-4256 | Medium | 5.5 | 2023-12-21 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnera… |
CVE-2023-49937 | Critical | 9.8 | 2023-12-14 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute a… |
CVE-2023-41678 | High | 8.8 | 2023-12-13 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthoriz… |
CVE-2023-40103 | High | 7.8 | 2023-12-04 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-48013 | High | 7.8 | 2023-11-15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c. |
CVE-2023-43281 | Medium | 6.5 | 2023-10-25 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main fun… |
CVE-2023-45679 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In t… |
CVE-2023-45666 | High | 7.3 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the content of out… |
CVE-2023-45664 | High | 7.3 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to double-free t… |
CVE-2023-42459 | High | 8.6 | 2023-10-16 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA subme… |
CVE-2023-36420 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36418 | High | 7.8 | 2023-10-10 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-41911 | Medium | 4.7 | 2023-09-28 | Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). |
CVE-2023-41374 | High | 7.8 | 2023-09-20 | Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially craf… |
CVE-2023-41325 | High | 7.4 | 2023-09-15 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog… |
CVE-2023-4389 | High | 7.0 | 2023-08-16 | A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This… |
CVE-2023-39975 | High | 8.8 | 2023-08-16 | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data… |
CVE-2023-35371 | High | 7.8 | 2023-08-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33952 | Medium | 6.7 | 2023-07-24 | A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of vali… |
CVE-2023-38434 | High | 7.5 | 2023-07-18 | xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method. |