CWE-415: Double Free, page 12

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

1. 7.8CVE-2022-40683EPSS 0.2%2023-02-16

   A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands

2. 9.8CVE-2021-33304EPSS 0.8%2023-02-15

   Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code.

3. 7.5CVE-2022-4450EPSS 29%2023-02-08

   The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are popula…

4. 6.5CVE-2023-25136EPSS 90%2023-02-03

   OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to…

5. 9.8CVE-2022-3806EPSS 1.0%2023-01-25

   Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.

6. 7.8CVE-2022-25717EPSS 0.1%2023-01-09

   Memory corruption in display due to double free while allocating frame buffer memory

7. 7.5CVE-2022-47975EPSS 0.6%2023-01-06

   The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.

8. 9.8CVE-2022-44640EPSS 2.3%2022-12-25

   Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

9. 7.8CVE-2022-40304EPSS 5.8%2022-11-23

   An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

10. 7.8CVE-2022-3238EPSS 0.2%2022-11-14

    A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system.

11. 6.7CVE-2022-32614EPSS 0.1%2022-11-08

    In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310571; Issue …

12. 6.5CVE-2021-39432EPSS 0.9%2022-11-04

    diplib v3.0.0 is vulnerable to Double Free.

13. 8.1CVE-2022-42915EPSS 3.7%2022-10-29

    curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the pr…

14. 6.5CVE-2022-32574EPSS 1.6%2022-10-25

    A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker …

15. 8.8CVE-2022-25750EPSS 0.1%2022-10-19

    Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

16. 7.8CVE-2022-25660EPSS 0.1%2022-10-19

    Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

17. 5.5CVE-2022-3595EPSS 0.3%2022-10-18

    A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file fs/cifs/sess.c of the component CIFS Handler. The manipulation leads to double free. It is rec…

18. 9.8CVE-2022-0699EPSS 1.7%2022-10-17

    A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

19. 7.5CVE-2019-5797ExploitEPSS 3.4%2022-09-29

    Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

20. 9.8CVE-2022-39002EPSS 0.6%2022-09-16

    Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.

21. 7.8CVE-2022-36043EPSS 0.4%2022-09-06

    Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bin_reloc_storage_free() when freeing relocations generated from qnx binary plugin. A user o…

22. 9.8CVE-2022-25668EPSS 0.4%2022-09-02

    Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, S…

23. 8.8CVE-2022-39170EPSS 1.2%2022-09-02

    libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.

24. 6.5CVE-2022-2519EPSS 1.3%2022-08-31

    There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1

25. 9.1CVE-2020-27794EPSS 1.1%2022-08-19

    A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.

26. 9.8CVE-2022-23459EPSS 1.0%2022-08-19

    Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment op…

27. 7.8CVE-2022-31614EPSS 0.3%2022-08-05

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code executio…

28. 7.5CVE-2022-2509EPSS 2.3%2022-08-01

    A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

29. 8.8CVE-2022-27864EPSS 1.2%2022-07-29

    A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target mu…

30. 7.5CVE-2022-36234EPSS 0.9%2022-07-28

    SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets.

31. 8.8CVE-2022-2008EPSS 1.1%2022-07-28

    Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

32. 7.8CVE-2022-2327EPSS 0.3%2022-07-22

    io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect …

33. 6.8CVE-2022-32962EPSS 0.2%2022-07-20

    HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

34. 5.9CVE-2022-31117EPSS 1.9%2022-07-05

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how…

35. 7.5CVE-2021-41688EPSS 1.8%2022-06-28

    DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it…

36. 5.5CVE-2022-34495EPSS 0.3%2022-06-26

    rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

37. 5.5CVE-2022-34494EPSS 0.3%2022-06-26

    rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

38. 7.8CVE-2022-33033EPSS 0.7%2022-06-23

    LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.

39. 7.5CVE-2022-31291EPSS 1.1%2022-06-16

    An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.

40. 7.8CVE-2021-39806EPSS 0.1%2022-06-15

    In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure,…

41. 9.8CVE-2022-20127EPSS 7.2%2022-06-15

    In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Produ…

42. 7.8CVE-2022-22103EPSS 0.2%2022-06-14

    Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto

43. 9.8CVE-2022-22086EPSS 0.6%2022-06-14

    Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…

44. 6.7CVE-2022-21758EPSS 0.1%2022-06-06

    In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06439600; Issue ID…

45. 7.8CVE-2021-42613EPSS 0.9%2022-05-24

    A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document.

46. 7.8CVE-2022-29032EPSS 0.8%2022-05-20

    A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library contains a doubl…

47. 9.8CVE-2022-28738EPSS 3.1%2022-05-09

    A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.

48. 7.5CVE-2020-14123EPSS 0.9%2022-04-22

    There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an attacker can cause the pointer to be repeatedly released through malicious operatio…

49. 5.3CVE-2021-42778EPSS 2.1%2022-04-18

    A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

50. 7.8CVE-2022-29156EPSS 0.4%2022-04-13

    drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.