CVE-2020-37239

9.3 criticalEPSS 0.5%

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_free() twice on the same pointer without triggering detection, as libc's malloc metadata overwrites babl's signature field upon freeing, enabling potential memory corruption and code execution.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2026-05-16
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

References

https://www.exploit-db.com/exploits/49259
https://www.gegl.org
https://www.gegl.org/babl/
https://www.vulncheck.com/advisories/libbabl-broken-double-free-detection-memory-safety

Check your stack JSON