CWE-415 · Double Free (page 7)
Page 7 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-17498 | Medium | 6.5 | 2020-08-13 | In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ… |
CVE-2020-0241 | High | 7.8 | 2020-08-11 | In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privi… |
CVE-2020-16217 | High | 7.8 | 2020-08-06 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remot… |
CVE-2020-1647 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free vulnerability can lead to a Denial of S… |
CVE-2019-20892 | Medium | 6.5 | 2020-06-25 | net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp pack… |
CVE-2020-3613 | High | 7.8 | 2020-06-22 | Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8… |
CVE-2019-14091 | High | 7.8 | 2020-06-22 | Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… |
CVE-2020-11900 | High | 8.2 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. |
CVE-2020-9844 | High | 7.5 | 2020-06-09 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker m… |
CVE-2020-9859 | High | 7.8 | 2020-06-05 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplementa… |
CVE-2020-3610 | High | 7.8 | 2020-06-02 | Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this obje… |
CVE-2020-11017 | Medium | 6.5 | 2020-05-29 | In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixe… |
CVE-2020-11044 | Low | 2.2 | 2020-05-07 | In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipu… |
CVE-2020-3179 | High | 7.5 | 2020-05-06 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2019-20792 | Medium | 6.8 | 2020-04-29 | OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check. |
CVE-2020-0081 | High | 7.8 | 2020-04-17 | In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional… |
CVE-2018-21086 | High | 8.1 | 2020-04-08 | An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswap_in… |
CVE-2019-20633 | Medium | 5.5 | 2020-03-25 | GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a… |
CVE-2020-6072 | Critical | 9.8 | 2020-03-24 | An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS me… |
CVE-2019-5184 | High | 7.8 | 2020-03-23 | An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written t… |
CVE-2020-1862 | Low | 3.3 | 2020-03-20 | There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due… |
CVE-2018-11838 | High | 7.8 | 2020-03-05 | Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Conne… |
CVE-2019-19943 | High | 7.5 | 2020-02-28 | The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parame… |
CVE-2020-1829 | High | 7.5 | 2020-02-17 | Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC5… |
CVE-2019-14055 | High | 7.8 | 2020-02-07 | Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon Auto, Snapd… |
CVE-2020-8432 | Critical | 9.8 | 2020-01-29 | In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where co… |
CVE-2020-8003 | Medium | 5.5 | 2020-01-27 | A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation f… |
CVE-2019-20397 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to par… |
CVE-2019-20394 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use l… |
CVE-2019-20393 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untruste… |
CVE-2007-4773 | Critical | 9.8 | 2020-01-15 | Systrace before 1.6.0 has insufficient escape policy enforcement. |
CVE-2019-9468 | High | 7.8 | 2020-01-06 | In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… |
CVE-2019-20014 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. |
CVE-2019-11049 | Medium | 6.5 | 2019-12-23 | In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddb… |
CVE-2019-8635 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbit… |
CVE-2019-10536 | High | 7.8 | 2019-12-18 | Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapd… |
CVE-2019-10517 | High | 7.8 | 2019-12-18 | Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-19725 | Critical | 9.8 | 2019-12-11 | sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. |
CVE-2019-2266 | High | 7.8 | 2019-11-21 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-5282 | High | 7.8 | 2019-11-13 | Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21… |
CVE-2011-1803 | Medium | 6.5 | 2019-11-12 | An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a… |
CVE-2011-2335 | High | 7.5 | 2019-11-12 | A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. |
CVE-2019-18874 | High | 7.5 | 2019-11-12 | psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system da… |
CVE-2019-10565 | Critical | 9.8 | 2019-11-06 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-17545 | Critical | 9.8 | 2019-10-14 | GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. |
CVE-2019-11932 | High | 8.8 | 2019-10-03 | A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android… |
CVE-2019-16880 | Critical | 9.8 | 2019-09-25 | An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method. |
CVE-2019-5481 | Critical | 9.8 | 2019-09-16 | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. |
CVE-2019-2115 | High | 7.8 | 2019-09-05 | In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could le… |
CVE-2017-18595 | High | 7.8 | 2019-09-04 | An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c. |
CVE-2017-18594 | High | 7.5 | 2019-08-29 | nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n char… |
CVE-2018-20996 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling. |
CVE-2019-15551 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity. |
CVE-2018-20991 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. |
CVE-2019-15504 | Critical | 9.8 | 2019-08-23 | drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usb… |
CVE-2019-8044 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-2126 | High | 8.8 | 2019-08-20 | In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code executi… |
CVE-2019-15212 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. |
CVE-2019-15151 | Critical | 9.8 | 2019-08-18 | AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. |
CVE-2019-1144 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully ex… |
CVE-2019-5236 | Medium | 6.3 | 2019-08-08 | Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156… |
CVE-2018-20961 | Critical | 9.8 | 2019-08-07 | In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may… |
CVE-2019-13105 | High | 7.8 | 2019-08-06 | Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem. |
CVE-2019-5460 | Medium | 5.5 | 2019-07-30 | Double Free in VLC versions <= 3.0.6 leads to a crash. |
CVE-2019-1020014 | Medium | 5.5 | 2019-07-29 | docker-credential-helpers before 0.6.3 has a double free in the List functions. |
CVE-2019-3896 | High | 7.0 | 2019-06-19 | A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege esca… |
CVE-2019-12874 | Critical | 9.8 | 2019-06-18 | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while pars… |
CVE-2019-12865 | Medium | 5.5 | 2019-06-17 | In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command. |
CVE-2018-11947 | Medium | 5.5 | 2019-06-14 | The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity… |
CVE-2019-2096 | High | 7.8 | 2019-06-07 | In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio… |
CVE-2019-5305 | Medium | 5.5 | 2019-06-06 | The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tric… |
CVE-2019-5219 | Medium | 5.5 | 2019-06-06 | There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tric… |
CVE-2019-7080 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-2247 | High | 7.8 | 2019-05-24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdrag… |
CVE-2016-9969 | High | 7.5 | 2019-05-23 | In libwebp 0.5.1, there is a double free bug in libwebpmux. |
CVE-2019-7784 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-12219 | High | 8.8 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an inv… |
CVE-2019-11490 | High | 7.8 | 2019-04-24 | An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit… |
CVE-2019-3829 | Medium | 5.3 | 2019-03-27 | A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any… |
CVE-2018-3985 | Critical | 9.8 | 2019-03-21 | An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if a… |
CVE-2019-0122 | High | 7.1 | 2019-03-14 | Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially… |
CVE-2019-1999 | High | 7.8 | 2019-02-28 | In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the k… |
CVE-2019-6978 | Critical | 9.8 | 2019-01-28 | The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. |
CVE-2019-6455 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c. |
CVE-2018-15518 | High | 8.8 | 2018-12-26 | QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document. |
CVE-2018-20450 | Medium | 6.5 | 2018-12-25 | The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a… |
CVE-2018-1000877 | High | 8.8 | 2018-12-20 | libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decode… |
CVE-2018-11987 | High | 7.8 | 2018-12-20 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is an unlikely memory alloc failure for the… |
CVE-2018-9553 | High | 7.8 | 2018-12-06 | In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no… |
CVE-2018-16841 | Medium | 6.5 | 2018-11-28 | Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication… |
CVE-2018-11918 | High | 7.8 | 2018-11-27 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated is automatically released by the ke… |
CVE-2018-11823 | High | 7.8 | 2018-11-27 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, freeing device memory in driver probe failure will r… |
CVE-2018-9415 | High | 7.8 | 2018-11-06 | In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of pri… |
CVE-2018-9356 | Critical | 9.8 | 2018-11-06 | In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2018-18751 | Critical | 9.8 | 2018-10-29 | An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in… |
CVE-2018-18718 | High | 7.8 | 2018-10-29 | An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two s… |
CVE-2017-18297 | High | 7.8 | 2018-10-23 | Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. |
CVE-2018-12841 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a double free vulnerability. Succ… |
CVE-2018-0469 | Medium | 6.8 | 2018-10-05 | A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The v… |
CVE-2018-9513 | High | 7.8 | 2018-10-02 | In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execut… |