CWE-415: Double Free, page 13

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

1. 7.8CVE-2022-27416EPSS 0.9%2022-04-12

   Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.

2. 7.8CVE-2022-25796EPSS 1.1%2022-04-11

   A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must …

3. 7.8CVE-2022-28390EPSS 0.4%2022-04-03

   ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

4. 5.5CVE-2022-28389EPSS 0.3%2022-04-03

   mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.

5. 5.5CVE-2022-28388EPSS 0.4%2022-04-03

   usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

6. 7.8CVE-2021-42533EPSS 2.1%2022-03-16

   Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user inter…

7. 6.7CVE-2021-39725EPSS 0.1%2022-03-16

   In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed…

8. 9.8CVE-2021-23158EPSS 2.4%2022-03-16

   A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service.

9. 6.5CVE-2021-46700EPSS 1.0%2022-02-19

   In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.

10. 7.8CVE-2021-46625EPSS 1.9%2022-02-18

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

11. 7.8CVE-2021-46621EPSS 1.9%2022-02-18

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…

12. 7.5CVE-2021-4091EPSS 2.0%2022-02-18

    A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

13. 7.0CVE-2021-22600KEVEPSS 6.6%2022-01-26

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past …

14. 7.5CVE-2022-23012EPSS 0.9%2022-01-25

    On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions …

15. 7.8CVE-2021-40574EPSS 1.3%2022-01-13

    The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileg…

16. 5.5CVE-2021-40573EPSS 0.7%2022-01-13

    The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service.

17. 5.5CVE-2021-40572EPSS 0.9%2022-01-13

    The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service.

18. 7.8CVE-2021-40571EPSS 1.2%2022-01-13

    The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.

19. 7.8CVE-2021-40570EPSS 1.2%2022-01-13

    The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.

20. 5.5CVE-2021-40569EPSS 0.9%2022-01-13

    The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a denial of service.

21. 5.5CVE-2021-37529EPSS 0.7%2022-01-12

    A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).

22. 7.5CVE-2021-40038EPSS 0.6%2022-01-10

    There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

23. 9.8CVE-2021-37120EPSS 0.9%2022-01-03

    There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.

24. 5.5CVE-2021-45288EPSS 0.6%2021-12-21

    A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.

25. 9.8CVE-2021-44732EPSS 2.8%2021-12-20

    Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

26. 7.5CVE-2021-37072EPSS 0.7%2021-12-07

    There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.

27. 6.5CVE-2021-43268EPSS 0.9%2021-11-24

    An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.

28. 7.5CVE-2021-40873EPSS 1.3%2021-11-10

    An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server proc…

29. 7.1CVE-2021-1119EPSS 0.3%2021-10-29

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allowing an attacker to …

30. 7.8CVE-2021-21797EPSS 15%2021-10-18

    An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will …

31. 4.9CVE-2021-25477EPSS 0.5%2021-10-06

    An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.

32. 9.1CVE-2021-22945EPSS 6.7%2021-09-23

    When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

33. 7.5CVE-2021-34769EPSS 1.4%2021-09-23

    Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to…

34. 7.5CVE-2021-34768EPSS 1.4%2021-09-23

    Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to…

35. 8.6CVE-2021-1565EPSS 1.3%2021-09-23

    Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to…

36. 8.8CVE-2021-39528EPSS 1.1%2021-09-20

    An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.

37. 7.8CVE-2021-1934EPSS 0.2%2021-09-09

    Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In…

38. 7.8CVE-2021-30703EPSS 0.3%2021-09-08

    A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. An applicat…

39. 7.8CVE-2021-1875EPSS 0.9%2021-09-08

    A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing …

40. 7.5CVE-2021-40145EPSS 2.1%2021-08-26

    gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and sho…

41. 6.5CVE-2021-34734EPSS 0.4%2021-08-18

    A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Thi…

42. 7.8CVE-2021-37652EPSS 0.2%2021-08-12

    TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can result in a use after free error if an attacker supplies specially crafted argum…

43. 7.0CVE-2021-22386EPSS 0.2%2021-08-10

    A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.

44. 9.8CVE-2020-36434EPSS 1.2%2021-08-08

    An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.

45. 7.8CVE-2021-22425EPSS 0.2%2021-08-03

    A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges.

46. 6.4CVE-2021-37159EPSS 0.4%2021-07-21

    hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

47. 5.5CVE-2021-0601EPSS 0.1%2021-07-14

    In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploit…

48. 5.5CVE-2021-34333EPSS 1.1%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files.…

49. 7.8CVE-2021-1888EPSS 0.2%2021-07-13

    Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdr…

50. 8.1CVE-2021-27033EPSS 3.0%2021-07-09

    A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruptio…