CWE-415 · Double Free (page 5)
Page 5 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34981 | Medium | 6.7 | 2024-05-07 | Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2024-27392 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() When nvme_identify_n… |
CVE-2024-27389 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: pstore: inode: Only d_invalidate() is needed Unloading a modular pstore backend with reco… |
CVE-2024-26932 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() When unregister pd c… |
CVE-2024-26930 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential… |
CVE-2022-48649 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug test, kfence… |
CVE-2024-26893 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in SMC transport cleanup path When the generic SCMI c… |
CVE-2024-26846 | Medium | 4.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between… |
CVE-2024-3446 | High | 8.2 | 2024-04-09 | A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently… |
CVE-2024-26257 | High | 7.8 | 2024-04-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-26792 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after snapshot creation failure When creating… |
CVE-2024-26782 | Critical | 9.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connecti… |
CVE-2024-26748 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if (request->complete) { … |
CVE-2024-26704 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), mo… |
CVE-2024-26694 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done l… |
CVE-2024-26653 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary_device_add() retur… |
CVE-2024-26652 | Medium | 4.1 | 2024-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add(… |
CVE-2024-2002 | High | 7.5 | 2024-03-18 | A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially cau… |
CVE-2021-47123 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_lin… |
CVE-2024-21445 | High | 7.0 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2021-47082 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_free_netdev() by movin… |
CVE-2021-46979 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: iio: core: fix ioctl handlers removal Currently ioctl handlers are removed twice. For the… |
CVE-2020-36785 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_buf" is free… |
CVE-2024-27099 | Critical | 9.8 | 2024-02-27 | The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free pr… |
CVE-2021-46938 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loadin… |
CVE-2023-52439 | High | 7.8 | 2024-02-20 | In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------… |
CVE-2024-23809 | Critical | 9.8 | 2024-02-20 | A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A… |
CVE-2024-22097 | Critical | 9.8 | 2024-02-20 | A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specia… |
CVE-2023-38562 | High | 8.7 | 2024-02-20 | A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network pa… |
CVE-2024-21606 | High | 7.5 | 2024-01-12 | A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker… |
CVE-2023-1032 | Medium | 4.7 | 2024-01-08 | The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in… |
CVE-2022-2588 | Medium | 5.3 | 2024-01-08 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handl… |
CVE-2023-28583 | Medium | 6.7 | 2024-01-02 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address. |
CVE-2023-52284 | Medium | 5.5 | 2023-12-31 | Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly… |
CVE-2023-4256 | Medium | 5.5 | 2023-12-21 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnera… |
CVE-2023-49937 | Critical | 9.8 | 2023-12-14 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute a… |
CVE-2023-41678 | High | 8.8 | 2023-12-13 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthoriz… |
CVE-2023-40103 | High | 7.8 | 2023-12-04 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-48013 | High | 7.8 | 2023-11-15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c. |
CVE-2023-43281 | Medium | 6.5 | 2023-10-25 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main fun… |
CVE-2023-45679 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In t… |
CVE-2023-45666 | High | 7.3 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the content of out… |
CVE-2023-45664 | High | 7.3 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to double-free t… |
CVE-2023-42459 | High | 8.6 | 2023-10-16 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA subme… |
CVE-2023-36420 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36418 | High | 7.8 | 2023-10-10 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-41911 | Medium | 4.7 | 2023-09-28 | Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). |
CVE-2023-41374 | High | 7.8 | 2023-09-20 | Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially craf… |
CVE-2023-41325 | High | 7.4 | 2023-09-15 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog… |
CVE-2023-4389 | High | 7.0 | 2023-08-16 | A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This… |
CVE-2023-39975 | High | 8.8 | 2023-08-16 | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data… |
CVE-2023-35371 | High | 7.8 | 2023-08-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33952 | Medium | 6.7 | 2023-07-24 | A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of vali… |
CVE-2023-38434 | High | 7.5 | 2023-07-18 | xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method. |
CVE-2023-33161 | High | 7.8 | 2023-07-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-21629 | Medium | 6.8 | 2023-07-04 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
CVE-2023-37365 | Medium | 6.5 | 2023-06-30 | Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. |
CVE-2023-1999 | Medium | 5.3 | 2023-06-20 | There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best… |
CVE-2023-3312 | High | 7.5 | 2023-06-19 | A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double re… |
CVE-2023-35784 | Critical | 9.8 | 2023-06-16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x… |
CVE-2023-33137 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-29368 | High | 7.0 | 2023-06-14 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2023-29366 | High | 7.8 | 2023-06-14 | Windows Geolocation Service Remote Code Execution Vulnerability |
CVE-2022-40522 | High | 8.4 | 2023-06-06 | Memory corruption in Linux Networking due to double free while handling a hyp-assign. |
CVE-2022-40507 | High | 8.4 | 2023-06-06 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
CVE-2022-33307 | High | 8.4 | 2023-06-06 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. |
CVE-2022-33227 | Medium | 6.7 | 2023-06-06 | Memory corruption in Linux android due to double free while calling unregister provider after register call. |
CVE-2023-21106 | High | 7.8 | 2023-05-15 | In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no addit… |
CVE-2023-28411 | Medium | 6.3 | 2023-05-10 | Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. |
CVE-2023-24903 | High | 8.1 | 2023-05-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-21500 | Medium | 6.0 | 2023-05-04 | Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memo… |
CVE-2023-29469 | Medium | 6.5 | 2023-04-24 | An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-de… |
CVE-2022-33231 | Critical | 9.3 | 2023-04-13 | Memory corruption due to double free in core while initializing the encryption key. |
CVE-2023-28296 | High | 7.8 | 2023-04-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-28464 | High | 7.8 | 2023-03-31 | hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_d… |
CVE-2022-4744 | High | 7.8 | 2023-03-30 | A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function… |
CVE-2023-27537 | Medium | 5.9 | 2023-03-30 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for… |
CVE-2023-25801 | High | 8.0 | 2023-03-25 | TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2… |
CVE-2023-21030 | High | 7.8 | 2023-03-24 | In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an… |
CVE-2023-1449 | Medium | 5.3 | 2023-03-17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_stat… |
CVE-2023-23402 | High | 7.8 | 2023-03-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2022-40515 | High | 7.3 | 2023-03-10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
CVE-2022-3707 | Medium | 5.5 | 2023-03-06 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the inte… |
CVE-2023-27320 | High | 7.2 | 2023-02-28 | Sudo before 1.9.13p2 has a double free in the per-command chroot feature. |
CVE-2023-26545 | Medium | 4.7 | 2023-02-25 | In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new locati… |
CVE-2022-20803 | High | 8.6 | 2023-02-17 | A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a… |
CVE-2022-40683 | High | 7.8 | 2023-02-16 | A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands |
CVE-2021-33304 | Critical | 9.8 | 2023-02-15 | Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attacke… |
CVE-2022-4450 | High | 7.5 | 2023-02-08 | The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the… |
CVE-2023-25136 | Medium | 6.5 | 2023-02-03 | OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be l… |
CVE-2022-3806 | Critical | 9.8 | 2023-01-25 | Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer. |
CVE-2022-25717 | Medium | 6.7 | 2023-01-09 | Memory corruption in display due to double free while allocating frame buffer memory |
CVE-2022-47975 | High | 7.5 | 2023-01-06 | The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-44640 | Critical | 9.8 | 2022-12-25 | Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC). |
CVE-2022-40304 | High | 7.8 | 2022-11-23 | An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic… |
CVE-2022-3238 | High | 7.8 | 2022-11-14 | A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to c… |
CVE-2022-32614 | Medium | 6.7 | 2022-11-08 | In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-39432 | Medium | 6.5 | 2022-11-04 | diplib v3.0.0 is vulnerable to Double Free. |
CVE-2022-42915 | High | 8.1 | 2022-10-29 | curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote serve… |