CWE-415 · Double Free (page 5)
Page 5 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33161 | High | 7.8 | 2023-07-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-21629 | Medium | 6.8 | 2023-07-04 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
CVE-2023-37365 | Medium | 6.5 | 2023-06-30 | Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. |
CVE-2023-1999 | Medium | 5.3 | 2023-06-20 | There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best… |
CVE-2023-3312 | High | 7.5 | 2023-06-19 | A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double re… |
CVE-2023-35784 | Critical | 9.8 | 2023-06-16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x… |
CVE-2023-33137 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-29368 | High | 7.0 | 2023-06-14 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2023-29366 | High | 7.8 | 2023-06-14 | Windows Geolocation Service Remote Code Execution Vulnerability |
CVE-2022-40522 | High | 8.4 | 2023-06-06 | Memory corruption in Linux Networking due to double free while handling a hyp-assign. |
CVE-2022-40507 | High | 8.4 | 2023-06-06 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
CVE-2022-33307 | High | 8.4 | 2023-06-06 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. |
CVE-2022-33227 | Medium | 6.7 | 2023-06-06 | Memory corruption in Linux android due to double free while calling unregister provider after register call. |
CVE-2023-21106 | High | 7.8 | 2023-05-15 | In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no addit… |
CVE-2023-28411 | Medium | 6.3 | 2023-05-10 | Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. |
CVE-2023-24903 | High | 8.1 | 2023-05-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-21500 | Medium | 6.0 | 2023-05-04 | Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memo… |
CVE-2023-29469 | Medium | 6.5 | 2023-04-24 | An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-de… |
CVE-2022-33231 | Critical | 9.3 | 2023-04-13 | Memory corruption due to double free in core while initializing the encryption key. |
CVE-2023-28296 | High | 7.8 | 2023-04-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-28464 | High | 7.8 | 2023-03-31 | hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_d… |
CVE-2022-4744 | High | 7.8 | 2023-03-30 | A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function… |
CVE-2023-27537 | Medium | 5.9 | 2023-03-30 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for… |
CVE-2023-25801 | High | 8.0 | 2023-03-25 | TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2… |
CVE-2023-21030 | High | 7.8 | 2023-03-24 | In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an… |
CVE-2023-1449 | Medium | 5.3 | 2023-03-17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_stat… |
CVE-2023-23402 | High | 7.8 | 2023-03-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2022-40515 | High | 7.3 | 2023-03-10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
CVE-2022-3707 | Medium | 5.5 | 2023-03-06 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the inte… |
CVE-2023-27320 | High | 7.2 | 2023-02-28 | Sudo before 1.9.13p2 has a double free in the per-command chroot feature. |
CVE-2023-26545 | Medium | 4.7 | 2023-02-25 | In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new locati… |
CVE-2022-20803 | High | 8.6 | 2023-02-17 | A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a… |
CVE-2022-40683 | High | 7.8 | 2023-02-16 | A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands |
CVE-2021-33304 | Critical | 9.8 | 2023-02-15 | Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attacke… |
CVE-2022-4450 | High | 7.5 | 2023-02-08 | The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the… |
CVE-2023-25136 | Medium | 6.5 | 2023-02-03 | OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be l… |
CVE-2022-3806 | Critical | 9.8 | 2023-01-25 | Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer. |
CVE-2022-25717 | Medium | 6.7 | 2023-01-09 | Memory corruption in display due to double free while allocating frame buffer memory |
CVE-2022-47975 | High | 7.5 | 2023-01-06 | The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-44640 | Critical | 9.8 | 2022-12-25 | Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC). |
CVE-2022-40304 | High | 7.8 | 2022-11-23 | An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic… |
CVE-2022-3238 | High | 7.8 | 2022-11-14 | A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to c… |
CVE-2022-32614 | Medium | 6.7 | 2022-11-08 | In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-39432 | Medium | 6.5 | 2022-11-04 | diplib v3.0.0 is vulnerable to Double Free. |
CVE-2022-42915 | High | 8.1 | 2022-10-29 | curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote serve… |
CVE-2022-32574 | Medium | 6.5 | 2022-10-25 | A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6… |
CVE-2022-25750 | High | 8.4 | 2022-10-19 | Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile |
CVE-2022-25660 | High | 7.8 | 2022-10-19 | Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob… |
CVE-2022-3595 | Low | 3.5 | 2022-10-18 | A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file fs/cifs/sess.c… |
CVE-2022-0699 | Critical | 9.8 | 2022-10-17 | A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have… |
CVE-2019-5797 | High | 7.5 | 2022-09-29 | Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-39002 | Critical | 9.8 | 2022-09-16 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
CVE-2022-36043 | High | 7.8 | 2022-09-06 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bin_reloc_st… |
CVE-2022-25668 | High | 7.3 | 2022-09-02 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2022-39170 | High | 8.8 | 2022-09-02 | libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. |
CVE-2022-2519 | Medium | 6.5 | 2022-08-31 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 |
CVE-2020-27794 | Critical | 9.1 | 2022-08-19 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and p… |
CVE-2022-23459 | High | 8.1 | 2022-08-19 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a… |
CVE-2022-31614 | High | 7.0 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vu… |
CVE-2022-2509 | High | 7.5 | 2022-08-01 | A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verif… |
CVE-2022-27864 | High | 8.8 | 2022-07-29 | A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations… |
CVE-2022-36234 | High | 7.5 | 2022-07-28 | SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted T… |
CVE-2022-2008 | High | 8.8 | 2022-07-28 | Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2327 | High | 7.5 | 2022-07-22 | io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing… |
CVE-2022-32962 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrup… |
CVE-2022-31117 | Medium | 5.9 | 2022-07-05 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating… |
CVE-2021-41688 | High | 7.5 | 2022-06-28 | DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific… |
CVE-2022-34495 | Medium | 5.5 | 2022-06-26 | rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. |
CVE-2022-34494 | Medium | 5.5 | 2022-06-26 | rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. |
CVE-2022-33033 | High | 7.8 | 2022-06-23 | LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. |
CVE-2022-31291 | High | 7.5 | 2022-06-16 | An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. |
CVE-2021-39806 | High | 7.8 | 2022-06-15 | In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during… |
CVE-2022-20127 | Critical | 9.8 | 2022-06-15 | In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2022-22103 | High | 7.8 | 2022-06-14 | Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto |
CVE-2022-22086 | High | 7.3 | 2022-06-14 | Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2022-21758 | Medium | 6.7 | 2022-06-06 | In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2021-42613 | High | 7.8 | 2022-05-24 | A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafte… |
CVE-2022-29032 | High | 7.8 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-28738 | Critical | 9.8 | 2022-05-09 | A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user inp… |
CVE-2020-14123 | High | 7.5 | 2022-04-22 | There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an att… |
CVE-2021-42778 | Medium | 5.3 | 2022-04-18 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. |
CVE-2022-29156 | High | 7.8 | 2022-04-13 | drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release. |
CVE-2022-27416 | High | 7.8 | 2022-04-12 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. |
CVE-2022-25796 | High | 7.8 | 2022-04-11 | A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. Use… |
CVE-2022-28390 | High | 7.8 | 2022-04-03 | ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2022-28389 | Medium | 5.5 | 2022-04-03 | mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2022-28388 | Medium | 5.5 | 2022-04-03 | usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2021-42533 | High | 7.8 | 2022-03-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code exec… |
CVE-2021-39725 | Medium | 6.7 | 2022-03-16 | In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of p… |
CVE-2021-23158 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker t… |
CVE-2021-46700 | Medium | 6.5 | 2022-02-19 | In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free. |
CVE-2021-46625 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46621 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-4091 | High | 7.5 | 2022-02-18 | A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, f… |
CVE-2021-22600 | Medium | 6.6 | 2022-01-26 | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny servi… |
CVE-2022-23012 | High | 7.5 | 2022-01-25 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause… |
CVE-2021-40574 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attack… |
CVE-2021-40573 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service. |
CVE-2021-40572 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service. |
CVE-2021-40571 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of… |