cve.bz

CWE-415: Double Free

Filter

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

Ask an AI about CWE-415

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. –CVE-2026-20582

    In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: A…

  2. –CVE-2026-20573

    In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: A…

  3. 6.9CVE-2026-119338EPSS 0.1%

    Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while receiving it by value, leaving line_top_rtl_pts and line_bottom_rtl…

  4. 8.7CVE-2026-119116EPSS 0.2%

    A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap me…

  5. 8.8CVE-2026-85890EPSS 0.6%

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2026-83831EPSS 0.8%

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  7. 7.8CVE-2026-88812EPSS 0.2%

    A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

  8. 6.8CVE-2026-116743EPSS 0.1%

    libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat fi…

  9. 7.1CVE-2026-112457EPSS 0.4%

    A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination…

  10. 5.5CVE-2026-116260EPSS 0.3%

    A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be perform…

  11. 5.2CVE-2026-78116EPSS 0.2%

    The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/afbr_s50/afbr_s50.c), a non-STATUS_OK return from Argus_Evaluat…

  12. 8.1CVE-2026-94300EPSS 1.0%

    Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries t…

  13. 5.5CVE-2026-86962EPSS 0.2%

    A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app …

  14. 2.1CVE-2026-112036EPSS 0.3%

    A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be …

  15. 5.3CVE-2026-57446EPSS 0.4%

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle b…

  16. 6.9CVE-2026-110599EPSS 0.2%

    L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex…

  17. 6.5CVE-2026-94370EPSS 0.3%

    A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to …

  18. 7.8CVE-2026-95635EPSS 0.2%

    Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

  19. 7.5CVE-2026-97830EPSS 1.1%

    Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

  20. 7.0CVE-2026-97812EPSS 0.3%

    Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-97811EPSS 0.3%

    Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

  22. 8.8CVE-2026-97772EPSS 0.8%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  23. 8.8CVE-2026-97767EPSS 0.6%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  24. 9.8CVE-2026-97749EPSS 1.2%

    Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  25. 9.8CVE-2026-96864EPSS 0.6%

    Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

  26. 7.0CVE-2026-95943EPSS 0.3%

    Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

  27. 8.1CVE-2026-88171EPSS 0.7%

    Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  28. 7.0CVE-2026-88149EPSS 0.2%

    Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-88071EPSS 0.3%

    Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  30. 8.8CVE-2026-85936EPSS 0.5%

    Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

  31. 7.0CVE-2026-85904EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-85829EPSS 0.3%

    Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

  33. 8.1CVE-2026-84012EPSS 0.7%

    Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  34. 7.0CVE-2026-83916EPSS 0.3%

    Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

  35. 7.0CVE-2026-83842EPSS 0.3%

    Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-83634EPSS 0.4%

    Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

  37. 8.8CVE-2026-70158EPSS 1.0%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  38. 8.1CVE-2026-70062EPSS 0.8%

    Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

  39. 7.0CVE-2026-108132EPSS 0.3%

    Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  40. 2.3CVE-2026-106175EPSS 0.10%

    A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiPr…

  41. 9.6CVE-2026-104192EPSS 0.3%

    Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, t…

  42. 7.1CVE-2026-109943EPSS 0.3%

    FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup…

  43. 6.3CVE-2026-109271EPSS 0.4%

    ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory alloc…

  44. 8.2CVE-2026-109257EPSS 0.4%

    FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a larg…

  45. 8.5CVE-2026-95702EPSS 0.08%

    Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing…

  46. 6.3CVE-2026-108104EPSS 0.2%

    Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared…

  47. 5.4CVE-2026-104113EPSS 0.1%

    A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmt_handler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/…

  48. 9.3CVE-2026-5759EPSS 0.6%

    A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replic…

  49. 6.5CVE-2026-107886EPSS 0.2%

    OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validatio…

  50. 7.5CVE-2026-107209EPSS 0.3%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause t…