CWE-415 · Double Free (page 6)
Page 6 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32574 | Medium | 6.5 | 2022-10-25 | A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6… |
CVE-2022-25750 | High | 8.4 | 2022-10-19 | Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile |
CVE-2022-25660 | High | 7.8 | 2022-10-19 | Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob… |
CVE-2022-3595 | Low | 3.5 | 2022-10-18 | A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file fs/cifs/sess.c… |
CVE-2022-0699 | Critical | 9.8 | 2022-10-17 | A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have… |
CVE-2019-5797 | High | 7.5 | 2022-09-29 | Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-39002 | Critical | 9.8 | 2022-09-16 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
CVE-2022-36043 | High | 7.8 | 2022-09-06 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bin_reloc_st… |
CVE-2022-25668 | High | 7.3 | 2022-09-02 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2022-39170 | High | 8.8 | 2022-09-02 | libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. |
CVE-2022-2519 | Medium | 6.5 | 2022-08-31 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 |
CVE-2020-27794 | Critical | 9.1 | 2022-08-19 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and p… |
CVE-2022-23459 | High | 8.1 | 2022-08-19 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a… |
CVE-2022-31614 | High | 7.0 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vu… |
CVE-2022-2509 | High | 7.5 | 2022-08-01 | A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verif… |
CVE-2022-27864 | High | 8.8 | 2022-07-29 | A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations… |
CVE-2022-36234 | High | 7.5 | 2022-07-28 | SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted T… |
CVE-2022-2008 | High | 8.8 | 2022-07-28 | Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2327 | High | 7.5 | 2022-07-22 | io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing… |
CVE-2022-32962 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrup… |
CVE-2022-31117 | Medium | 5.9 | 2022-07-05 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating… |
CVE-2021-41688 | High | 7.5 | 2022-06-28 | DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific… |
CVE-2022-34495 | Medium | 5.5 | 2022-06-26 | rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. |
CVE-2022-34494 | Medium | 5.5 | 2022-06-26 | rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. |
CVE-2022-33033 | High | 7.8 | 2022-06-23 | LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. |
CVE-2022-31291 | High | 7.5 | 2022-06-16 | An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. |
CVE-2021-39806 | High | 7.8 | 2022-06-15 | In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during… |
CVE-2022-20127 | Critical | 9.8 | 2022-06-15 | In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2022-22103 | High | 7.8 | 2022-06-14 | Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto |
CVE-2022-22086 | High | 7.3 | 2022-06-14 | Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2022-21758 | Medium | 6.7 | 2022-06-06 | In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2021-42613 | High | 7.8 | 2022-05-24 | A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafte… |
CVE-2022-29032 | High | 7.8 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-28738 | Critical | 9.8 | 2022-05-09 | A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user inp… |
CVE-2020-14123 | High | 7.5 | 2022-04-22 | There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an att… |
CVE-2021-42778 | Medium | 5.3 | 2022-04-18 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. |
CVE-2022-29156 | High | 7.8 | 2022-04-13 | drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release. |
CVE-2022-27416 | High | 7.8 | 2022-04-12 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. |
CVE-2022-25796 | High | 7.8 | 2022-04-11 | A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. Use… |
CVE-2022-28390 | High | 7.8 | 2022-04-03 | ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2022-28389 | Medium | 5.5 | 2022-04-03 | mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2022-28388 | Medium | 5.5 | 2022-04-03 | usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. |
CVE-2021-42533 | High | 7.8 | 2022-03-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code exec… |
CVE-2021-39725 | Medium | 6.7 | 2022-03-16 | In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of p… |
CVE-2021-23158 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker t… |
CVE-2021-46700 | Medium | 6.5 | 2022-02-19 | In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free. |
CVE-2021-46625 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46621 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-4091 | High | 7.5 | 2022-02-18 | A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, f… |
CVE-2021-22600 | Medium | 6.6 | 2022-01-26 | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny servi… |
CVE-2022-23012 | High | 7.5 | 2022-01-25 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause… |
CVE-2021-40574 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attack… |
CVE-2021-40573 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service. |
CVE-2021-40572 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service. |
CVE-2021-40571 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of… |
CVE-2021-40570 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of se… |
CVE-2021-40569 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a de… |
CVE-2021-37529 | Medium | 5.5 | 2022-01-12 | A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (… |
CVE-2021-40038 | High | 7.5 | 2022-01-10 | There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-37120 | Critical | 9.8 | 2022-01-03 | There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation. |
CVE-2021-45288 | Medium | 5.5 | 2021-12-21 | A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command. |
CVE-2021-44732 | Critical | 9.8 | 2021-12-20 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. |
CVE-2021-37072 | High | 7.5 | 2021-12-07 | There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash. |
CVE-2021-43268 | Medium | 6.5 | 2021-11-24 | An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a doub… |
CVE-2021-40873 | High | 7.5 | 2021-11-10 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of… |
CVE-2021-1119 | High | 7.1 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service… |
CVE-2021-21797 | High | 7.8 | 2021-10-18 | An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a time… |
CVE-2021-25477 | Medium | 4.4 | 2021-10-06 | An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service. |
CVE-2021-22945 | Critical | 9.1 | 2021-09-23 | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and bo… |
CVE-2021-34769 | High | 8.6 | 2021-09-23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 900… |
CVE-2021-34768 | High | 8.6 | 2021-09-23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 900… |
CVE-2021-1565 | High | 8.6 | 2021-09-23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 900… |
CVE-2021-39528 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. |
CVE-2021-1934 | High | 8.4 | 2021-09-09 | Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Sna… |
CVE-2021-30703 | High | 7.8 | 2021-09-08 | A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalin… |
CVE-2021-1875 | High | 7.8 | 2021-09-08 | A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, i… |
CVE-2021-40145 | High | 7.5 | 2021-08-26 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a pro… |
CVE-2021-34734 | Medium | 6.5 | 2021-08-18 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unau… |
CVE-2021-37652 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can… |
CVE-2021-22386 | High | 7.0 | 2021-08-10 | A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges. |
CVE-2020-36434 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free. |
CVE-2021-22425 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges. |
CVE-2021-37159 | Medium | 6.4 | 2021-07-21 | hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leadi… |
CVE-2021-0601 | Medium | 5.5 | 2021-07-14 | In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no ad… |
CVE-2021-34333 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-1888 | High | 8.4 | 2021-07-13 | Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-27033 | High | 8.1 | 2021-07-09 | A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review applicat… |
CVE-2021-36088 | Critical | 9.8 | 2021-07-01 | Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do). |
CVE-2021-36080 | High | 8.8 | 2021-07-01 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). |
CVE-2020-36401 | High | 7.8 | 2021-07-01 | mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). |
CVE-2021-34184 | Critical | 9.8 | 2021-06-25 | Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h. |
CVE-2021-0528 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0498 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-3564 | Medium | 5.5 | 2021-06-08 | A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth devic… |
CVE-2021-30535 | High | 8.8 | 2021-06-07 | Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-32613 | Medium | 5.5 | 2021-05-14 | In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. |
CVE-2020-14354 | Low | 3.3 | 2021-05-13 | A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly a… |
CVE-2021-31449 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-1910 | High | 7.3 | 2021-05-07 | Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdra… |
CVE-2021-31996 | High | 7.5 | 2021-05-03 | An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge(). |