CWE-415 · Double Free (page 7)
Page 7 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22332 | High | 7.5 | 2021-04-28 | There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is… |
CVE-2021-0271 | Medium | 6.5 | 2021-04-22 | A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to… |
CVE-2021-3492 | High | 8.8 | 2021-04-17 | Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. Thes… |
CVE-2021-31162 | Critical | 9.8 | 2021-04-14 | In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics. |
CVE-2021-0437 | High | 7.8 | 2021-04-13 | In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional… |
CVE-2020-36318 | Critical | 9.8 | 2021-04-11 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug… |
CVE-2021-30457 | Critical | 9.8 | 2021-04-07 | An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a panic in a Drop impl. |
CVE-2021-30456 | Critical | 9.8 | 2021-04-07 | An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon a panic of a user-provided f function. |
CVE-2021-30455 | Critical | 9.8 | 2021-04-07 | An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic. |
CVE-2021-29627 | High | 7.8 | 2021-04-07 | In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing… |
CVE-2020-11246 | High | 8.4 | 2021-04-07 | A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2020-11231 | Medium | 6.7 | 2021-04-07 | Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapd… |
CVE-2021-29940 | Critical | 9.8 | 2021-04-01 | An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function. |
CVE-2021-29938 | High | 7.5 | 2021-04-01 | An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate f… |
CVE-2021-29933 | High | 7.5 | 2021-04-01 | An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next() method panics. |
CVE-2021-29931 | High | 7.5 | 2021-04-01 | An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop(). |
CVE-2021-29929 | High | 7.5 | 2021-04-01 | An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics. |
CVE-2021-0397 | Critical | 9.8 | 2021-03-10 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no addition… |
CVE-2021-0392 | High | 7.8 | 2021-03-10 | In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privilege… |
CVE-2021-28041 | High | 7.1 | 2021-03-05 | ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy op… |
CVE-2021-28034 | Critical | 9.8 | 2021-03-05 | An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic. |
CVE-2021-28031 | Critical | 9.8 | 2021-03-05 | An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f func… |
CVE-2021-28028 | Critical | 9.8 | 2021-03-05 | An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic. |
CVE-2021-3403 | High | 7.8 | 2021-03-04 | In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a d… |
CVE-2021-27645 | Low | 2.5 | 2021-02-24 | The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due… |
CVE-2021-3407 | Medium | 5.5 | 2021-02-23 | A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences. |
CVE-2019-19005 | High | 7.8 | 2021-02-11 | A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-a… |
CVE-2021-26954 | Medium | 5.3 | 2021-02-09 | An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop. |
CVE-2021-22303 | Low | 3.3 | 2021-02-06 | There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attacker… |
CVE-2021-25908 | High | 7.5 | 2021-01-26 | An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free. |
CVE-2021-25907 | Critical | 9.8 | 2021-01-26 | An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed. |
CVE-2020-36225 | High | 7.5 | 2021-01-26 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. |
CVE-2020-36223 | High | 7.5 | 2021-01-26 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double f… |
CVE-2020-36205 | Medium | 5.5 | 2021-01-26 | An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or… |
CVE-2020-3685 | High | 7.5 | 2021-01-21 | Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2020-11217 | High | 7.8 | 2021-01-21 | A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2020-35891 | High | 7.5 | 2020-12-31 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free. |
CVE-2020-35885 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation. |
CVE-2020-35862 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. |
CVE-2019-25009 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness. |
CVE-2020-16590 | Medium | 5.5 | 2020-12-09 | A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readel… |
CVE-2020-15710 | Medium | 5.3 | 2020-11-19 | Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice… |
CVE-2020-17019 | High | 7.8 | 2020-11-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2020-16970 | High | 8.1 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-9747 | High | 7.8 | 2020-10-21 | Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code exec… |
CVE-2020-1686 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigged by a mal… |
CVE-2020-27153 | High | 8.6 | 2020-10-15 | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of… |
CVE-2020-25637 | Medium | 6.7 | 2020-10-06 | A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of… |
CVE-2020-5988 | High | 7.1 | 2020-10-02 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure… |
CVE-2020-24698 | Critical | 9.8 | 2020-10-02 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able t… |
CVE-2020-25773 | High | 7.8 | 2020-09-29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interact… |
CVE-2020-0392 | High | 7.8 | 2020-09-17 | In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no a… |
CVE-2020-25559 | High | 7.8 | 2020-09-16 | gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution. |
CVE-2019-14065 | High | 7.8 | 2020-09-08 | u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… |
CVE-2020-24978 | Critical | 9.8 | 2020-09-04 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7. |
CVE-2020-17498 | Medium | 6.5 | 2020-08-13 | In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ… |
CVE-2020-0241 | High | 7.8 | 2020-08-11 | In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privi… |
CVE-2020-16217 | High | 7.8 | 2020-08-06 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remot… |
CVE-2020-1647 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free vulnerability can lead to a Denial of S… |
CVE-2019-20892 | Medium | 6.5 | 2020-06-25 | net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp pack… |
CVE-2020-3613 | High | 7.8 | 2020-06-22 | Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8… |
CVE-2019-14091 | High | 7.8 | 2020-06-22 | Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… |
CVE-2020-11900 | High | 8.2 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. |
CVE-2020-9844 | High | 7.5 | 2020-06-09 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker m… |
CVE-2020-9859 | High | 7.8 | 2020-06-05 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplementa… |
CVE-2020-3610 | High | 7.8 | 2020-06-02 | Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this obje… |
CVE-2020-11017 | Medium | 6.5 | 2020-05-29 | In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixe… |
CVE-2020-11044 | Low | 2.2 | 2020-05-07 | In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipu… |
CVE-2020-3179 | High | 7.5 | 2020-05-06 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2019-20792 | Medium | 6.8 | 2020-04-29 | OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check. |
CVE-2020-0081 | High | 7.8 | 2020-04-17 | In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional… |
CVE-2018-21086 | High | 8.1 | 2020-04-08 | An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswap_in… |
CVE-2019-20633 | Medium | 5.5 | 2020-03-25 | GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a… |
CVE-2020-6072 | Critical | 9.8 | 2020-03-24 | An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS me… |
CVE-2019-5184 | High | 7.8 | 2020-03-23 | An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written t… |
CVE-2020-1862 | Low | 3.3 | 2020-03-20 | There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due… |
CVE-2018-11838 | High | 7.8 | 2020-03-05 | Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Conne… |
CVE-2019-19943 | High | 7.5 | 2020-02-28 | The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parame… |
CVE-2020-1829 | High | 7.5 | 2020-02-17 | Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC5… |
CVE-2019-14055 | High | 7.8 | 2020-02-07 | Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon Auto, Snapd… |
CVE-2020-8432 | Critical | 9.8 | 2020-01-29 | In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where co… |
CVE-2020-8003 | Medium | 5.5 | 2020-01-27 | A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation f… |
CVE-2019-20397 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to par… |
CVE-2019-20394 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use l… |
CVE-2019-20393 | High | 8.8 | 2020-01-22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untruste… |
CVE-2007-4773 | Critical | 9.8 | 2020-01-15 | Systrace before 1.6.0 has insufficient escape policy enforcement. |
CVE-2019-9468 | High | 7.8 | 2020-01-06 | In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… |
CVE-2019-20014 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. |
CVE-2019-11049 | Medium | 6.5 | 2019-12-23 | In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddb… |
CVE-2019-8635 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbit… |
CVE-2019-10536 | High | 7.8 | 2019-12-18 | Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapd… |
CVE-2019-10517 | High | 7.8 | 2019-12-18 | Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-19725 | Critical | 9.8 | 2019-12-11 | sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. |
CVE-2019-2266 | High | 7.8 | 2019-11-21 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-5282 | High | 7.8 | 2019-11-13 | Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21… |
CVE-2011-1803 | Medium | 6.5 | 2019-11-12 | An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a… |
CVE-2011-2335 | High | 7.5 | 2019-11-12 | A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. |
CVE-2019-18874 | High | 7.5 | 2019-11-12 | psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system da… |
CVE-2019-10565 | Critical | 9.8 | 2019-11-06 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-17545 | Critical | 9.8 | 2019-10-14 | GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. |