CWE-415 · Double Free (page 8)
Page 8 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-4000 | High | 7.8 | 2018-10-01 | An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cau… |
CVE-2018-17825 | Critical | 9.8 | 2018-10-01 | An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDest… |
CVE-2018-11982 | High | 8.8 | 2018-09-20 | In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD… |
CVE-2018-11840 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN driver command ioctl a te… |
CVE-2018-11276 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocation is possible in Ker… |
CVE-2018-11273 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as a device-managed re… |
CVE-2018-11270 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with devm_kzalloc is automatically… |
CVE-2018-17097 | High | 8.8 | 2018-09-16 | The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unsp… |
CVE-2018-14638 | High | 7.5 | 2018-09-14 | A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are… |
CVE-2018-16425 | Medium | 6.6 | 2018-09-04 | A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by at… |
CVE-2018-16424 | Medium | 6.6 | 2018-09-04 | A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to s… |
CVE-2018-16423 | Medium | 6.6 | 2018-09-04 | A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to… |
CVE-2018-16402 | Critical | 9.8 | 2018-09-03 | libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other… |
CVE-2018-10902 | High | 7.8 | 2018-08-21 | It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_para… |
CVE-2018-1000222 | High | 8.8 | 2018-08-20 | Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear… |
CVE-2018-1000216 | High | 8.8 | 2018-08-20 | Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attac… |
CVE-2016-8619 | Medium | 5.3 | 2018-08-01 | The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. |
CVE-2016-8618 | Medium | 5.3 | 2018-07-31 | The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on sy… |
CVE-2018-14524 | Medium | 6.5 | 2018-07-23 | dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value… |
CVE-2018-12782 | Critical | 9.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free vulnerability. Succ… |
CVE-2018-14054 | Critical | 9.8 | 2018-07-13 | A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is… |
CVE-2018-4990 | High | 8.8 | 2018-07-09 | Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Succ… |
CVE-2017-15856 | High | 7.0 | 2018-07-06 | Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the li… |
CVE-2018-11730 | Medium | 5.5 | 2018-06-19 | The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cau… |
CVE-2017-15843 | High | 7.0 | 2018-06-12 | Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CAF (Android for MSM… |
CVE-2018-11416 | High | 8.8 | 2018-05-24 | jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (applica… |
CVE-2018-11243 | High | 7.8 | 2018-05-18 | PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of a malware scanner t… |
CVE-2018-9336 | High | 7.8 | 2018-05-01 | openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malfor… |
CVE-2018-3855 | High | 7.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting… |
CVE-2018-3845 | High | 8.8 | 2018-04-26 | In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting… |
CVE-2018-8835 | High | 7.8 | 2018-04-25 | Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code exec… |
CVE-2017-14449 | High | 7.5 | 2018-04-24 | A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situatio… |
CVE-2018-7899 | Medium | 5.5 | 2018-04-19 | The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.111(C00), 8.0.0.112D(C00), 8.0.0.116(C00… |
CVE-2015-9165 | Critical | 9.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 2… |
CVE-2018-3593 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W… |
CVE-2017-15826 | High | 7.8 | 2018-03-30 | Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may potentially… |
CVE-2018-0160 | Medium | 6.3 | 2018-03-28 | A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial… |
CVE-2018-7523 | Medium | 5.3 | 2018-03-21 | In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability. |
CVE-2017-17320 | High | 7.8 | 2018-03-20 | Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does n… |
CVE-2018-8804 | High | 8.8 | 2018-03-20 | WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application… |
CVE-2018-3560 | High | 7.8 | 2018-03-16 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Double Free vulnerability exists in Audio Dri… |
CVE-2018-8099 | Medium | 6.5 | 2018-03-14 | Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a… |
CVE-2018-7589 | High | 7.8 | 2018-03-01 | An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image. |
CVE-2017-18201 | Critical | 9.8 | 2018-02-26 | An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c. |
CVE-2018-7480 | High | 7.8 | 2018-02-25 | The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly h… |
CVE-2018-7263 | Critical | 9.8 | 2018-02-20 | The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double… |
CVE-2018-5379 | High | 7.5 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unkn… |
CVE-2017-15330 | Medium | 5.5 | 2018-02-15 | The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167 has a double free vulnerability. An atta… |
CVE-2018-6952 | High | 7.5 | 2018-02-13 | A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. |
CVE-2017-18174 | Critical | 9.8 | 2018-02-11 | In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free. |
CVE-2017-18120 | High | 7.8 | 2018-02-02 | A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impa… |
CVE-2018-0101 | Critical | 10.0 | 2018-01-29 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, rem… |
CVE-2018-0102 | High | 7.4 | 2018-01-18 | A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting i… |
CVE-2017-13181 | High | 7.8 | 2018-01-12 | In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local… |
CVE-2017-9705 | High | 7.8 | 2018-01-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read() operatio… |
CVE-2017-15316 | High | 7.8 | 2017-12-22 | The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8… |
CVE-2017-8141 | High | 7.8 | 2017-11-22 | The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker wi… |
CVE-2017-8140 | High | 7.8 | 2017-11-22 | The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks… |
CVE-2017-6166 | Medium | 5.9 | 2017-11-22 | In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkerne… |
CVE-2017-1000232 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2017-1000231 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2017-11032 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a double free can occur when kmalloc fails to a… |
CVE-2017-16820 | Critical | 9.8 | 2017-11-14 | The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead t… |
CVE-2017-15186 | Medium | 6.5 | 2017-10-24 | Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file. |
CVE-2015-5177 | High | 7.5 | 2017-10-22 | Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) v… |
CVE-2015-1239 | Medium | 6.5 | 2017-10-18 | Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a deni… |
CVE-2017-14952 | Critical | 9.8 | 2017-10-16 | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a c… |
CVE-2017-15364 | Medium | 5.5 | 2017-10-15 | The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unsp… |
CVE-2017-9687 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the… |
CVE-2017-9686 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free… |
CVE-2017-11462 | Critical | 9.8 | 2017-09-13 | Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security context… |
CVE-2017-6362 | High | 7.5 | 2017-09-07 | Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a pa… |
CVE-2015-7700 | Critical | 9.8 | 2017-08-31 | Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors. |
CVE-2017-10950 | High | 7.0 | 2017-08-29 | This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must firs… |
CVE-2017-12925 | Medium | 6.5 | 2017-08-28 | Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image. |
CVE-2017-12858 | Critical | 9.8 | 2017-08-23 | Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors. |
CVE-2017-8265 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free. |
CVE-2015-5203 | Medium | 5.5 | 2017-08-02 | Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted… |
CVE-2017-1000072 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected memory locations |
CVE-2017-11139 | Critical | 9.8 | 2017-07-10 | GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c. |
CVE-2017-10914 | High | 8.1 | 2017-07-05 | The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory co… |
CVE-2017-7521 | Medium | 5.9 | 2017-06-27 | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issu… |
CVE-2017-7373 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. |
CVE-2015-1207 | Medium | 6.5 | 2017-06-06 | Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption a… |
CVE-2015-9007 | High | 7.8 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist. |
CVE-2017-9287 | Medium | 6.5 | 2017-05-29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd… |
CVE-2017-9078 | High | 8.8 | 2017-05-19 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the… |
CVE-2017-8890 | High | 7.8 | 2017-05-10 | The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double f… |
CVE-2016-1516 | High | 8.8 | 2017-04-10 | OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. |
CVE-2017-2425 | High | 7.8 | 2017-04-02 | An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "SecurityFoundation" component. A double free vulne… |
CVE-2017-7393 | High | 8.8 | 2017-04-01 | In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially… |
CVE-2014-9807 | Medium | 5.5 | 2017-03-30 | The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors. |
CVE-2017-5506 | High | 7.8 | 2017-03-24 | Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. |
CVE-2017-5334 | Critical | 9.8 | 2017-03-24 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecifi… |
CVE-2015-8894 | Medium | 5.5 | 2017-03-15 | Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted… |
CVE-2017-2636 | High | 7.0 | 2017-03-07 | Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by s… |
CVE-2017-5836 | High | 7.5 | 2017-03-03 | The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated… |
CVE-2017-6353 | Medium | 5.5 | 2017-03-01 | net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local… |
CVE-2017-6074 | High | 7.8 | 2017-02-18 | The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN sta… |
CVE-2016-8693 | High | 7.8 | 2017-02-15 | Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or p… |