CWE-415: Double Free, page 11
Filter
The product calls free() twice on the same memory address.
What the weakness is: CWE-415 at MITRE
Ask an AI about CWE-415
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2023-40103EPSS 0.2%
In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8CVE-2023-48013EPSS 0.3%
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.
- 6.5CVE-2023-43281EPSS 1.3%
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- 7.8CVE-2023-45679EPSS 0.5%
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, but some of the pointers in `f->comment_lis…
- 9.8CVE-2023-45666EPSS 1.1%
stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the content of output value `*delays` upon failure. Although it sets `*delays` to zero at the begi…
- 8.8CVE-2023-45664EPSS 0.9%
stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to double-free the out variable. This happens in `stbi__load_gif_main` because when the `layers …
- 7.5CVE-2023-42459EPSS 1.0%
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This c…
- 7.8CVE-2023-36420EPSS 0.8%
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- 7.8CVE-2023-36418EPSS 0.7%
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
- 6.7CVE-2023-32824EPSS 0.09%
In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID:…
- 5.5CVE-2023-41911EPSS 0.1%
Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2).
- 7.8CVE-2023-41374EPSS 0.2%
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1…
- 6.7CVE-2023-41325EPSS 0.4%
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, `shdr_verify_signature` c…
- 7.1CVE-2023-4389EPSS 0.3%
A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may…
- 8.8CVE-2023-39975EPSS 1.5%
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
- 7.8CVE-2023-35371EPSS 1.0%
Microsoft Office Remote Code Execution Vulnerability
- 6.7CVE-2023-33952EPSS 0.5%
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on…
- 7.5CVE-2023-38434EPSS 1.1%
xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.
- 7.8CVE-2023-33161EPSS 0.6%
Microsoft Excel Remote Code Execution Vulnerability
- 6.8CVE-2023-21629EPSS 0.2%
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
- 6.5CVE-2023-37365EPSS 0.6%
Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.
- 7.5CVE-2023-1999EPSS 1.0%
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory…
- 7.5CVE-2023-3312EPSS 0.9%
A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service.
- 9.8CVE-2023-35784EPSS 0.9%
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
- 7.8CVE-2023-33137ExploitEPSS 2.7%
Microsoft Excel Remote Code Execution Vulnerability
- 7.0CVE-2023-29368EPSS 0.4%
Windows Filtering Platform Elevation of Privilege Vulnerability
- 7.8CVE-2023-29366EPSS 0.7%
Windows Geolocation Service Remote Code Execution Vulnerability
- 7.8CVE-2022-40522EPSS 0.1%
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
- 7.8CVE-2022-40507EPSS 1.3%
Memory corruption due to double free in Core while mapping HLOS address to the list.
- 7.8CVE-2022-33307EPSS 0.1%
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
- 7.8CVE-2022-33227EPSS 0.1%
Memory corruption in Linux android due to double free while calling unregister provider after register call.
- 7.8CVE-2023-21106EPSS 0.1%
In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati…
- 5.5CVE-2023-28411EPSS 0.2%
Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
- 8.1CVE-2023-24903EPSS 0.9%
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- 5.5CVE-2023-21500EPSS 0.2%
Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory.
- 6.5CVE-2023-29469EPSS 1.3%
An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double…
- 7.8CVE-2022-33231EPSS 0.08%
Memory corruption due to double free in core while initializing the encryption key.
- 7.8CVE-2023-28296EPSS 0.7%
Visual Studio Remote Code Execution Vulnerability
- 7.8CVE-2023-28464EPSS 0.3%
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escal…
- 7.8CVE-2022-4744EPSS 0.5%
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or pote…
- 5.9CVE-2023-27537EPSS 1.9%
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact…
- 7.8CVE-2023-25801EPSS 0.1%
TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be…
- 7.8CVE-2023-21030EPSS 0.10%
In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User intera…
- 7.8CVE-2023-1449EPSS 0.4%
A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. I…
- 7.8CVE-2023-23402EPSS 0.6%
Windows Media Remote Code Execution Vulnerability
- 9.8CVE-2022-40515EPSS 0.3%
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
- 5.5CVE-2022-3707EPSS 0.2%
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash …
- 7.2CVE-2023-27320EPSS 1.7%
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
- 4.7CVE-2023-26545EPSS 0.3%
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.
- 7.5CVE-2022-20803EPSS 1.1%
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to in…