CWE-415: Double Free, page 14

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

1. 9.8CVE-2021-36088EPSS 2.4%2021-07-01

   Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).

2. 8.8CVE-2021-36080EPSS 1.3%2021-07-01

   GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).

3. 7.8CVE-2020-36401EPSS 1.0%2021-07-01

   mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

4. 9.8CVE-2021-34184EPSS 1.1%2021-06-25

   Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.

5. 7.8CVE-2021-0528EPSS 0.1%2021-06-21

   In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ…

6. 7.8CVE-2021-0498EPSS 0.1%2021-06-11

   In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ…

7. 5.5CVE-2021-3564EPSS 0.5%2021-06-08

   A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all t…

8. 8.8CVE-2021-30535EPSS 1.1%2021-06-07

   Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

9. 5.5CVE-2021-32613EPSS 1.2%2021-05-14

   In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.

10. 3.3CVE-2020-14354EPSS 0.5%2021-05-13

    A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat …

11. 7.8CVE-2021-31449EPSS 2.8%2021-05-07

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …

12. 9.8CVE-2021-1910EPSS 0.6%2021-05-07

    Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear…

13. 7.5CVE-2021-31996EPSS 1.0%2021-05-03

    An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().

14. 7.5CVE-2021-22332EPSS 0.7%2021-04-28

    There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same memory pointer is copied to two functional modules. Attackers …

15. 6.5CVE-2021-0271EPSS 0.4%2021-04-22

    A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service (DoS) by sending a crafted ARP packet to the device. C…

16. 7.8CVE-2021-3492EPSS 1.5%2021-04-17

    Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all.…

17. 9.8CVE-2021-31162EPSS 2.9%2021-04-14

    In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.

18. 7.8CVE-2021-0437EPSS 0.2%2021-04-13

    In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…

19. 9.8CVE-2020-36318EPSS 1.7%2021-04-11

    In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

20. 9.8CVE-2021-30457EPSS 1.1%2021-04-07

    An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a panic in a Drop impl.

21. 9.8CVE-2021-30456EPSS 1.1%2021-04-07

    An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon a panic of a user-provided f function.

22. 9.8CVE-2021-30455EPSS 1.1%2021-04-07

    An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic.

23. 7.8CVE-2021-29627EPSS 0.7%2021-04-07

    In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. …

24. 7.8CVE-2020-11246EPSS 0.2%2021-04-07

    A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

25. 6.7CVE-2020-11231EPSS 0.2%2021-04-07

    Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu…

26. 9.8CVE-2021-29940EPSS 1.4%2021-04-01

    An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function.

27. 7.5CVE-2021-29938EPSS 1.2%2021-04-01

    An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate function.

28. 7.5CVE-2021-29933EPSS 1.2%2021-04-01

    An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next() method panics.

29. 7.5CVE-2021-29931EPSS 1.0%2021-04-01

    An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop().

30. 7.5CVE-2021-29929EPSS 1.2%2021-04-01

    An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics.

31. 9.8CVE-2021-0397EPSS 5.7%2021-03-10

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.…

32. 7.8CVE-2021-0392EPSS 0.2%2021-03-10

    In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersio…

33. 7.1CVE-2021-28041EPSS 3.5%2021-03-05

    ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

34. 9.8CVE-2021-28034EPSS 1.3%2021-03-05

    An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.

35. 9.8CVE-2021-28031EPSS 1.4%2021-03-05

    An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.

36. 9.8CVE-2021-28028EPSS 1.3%2021-03-05

    An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.

37. 7.8CVE-2021-3403EPSS 1.8%2021-03-04

    In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

38. 2.5CVE-2021-27645EPSS 0.4%2021-02-24

    The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service…

39. 5.5CVE-2021-3407EPSS 50%2021-02-23

    A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

40. 7.8CVE-2019-19005EPSS 1.0%2021-02-11

    A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.

41. 5.3CVE-2021-26954EPSS 1.4%2021-02-09

    An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop.

42. 3.3CVE-2021-22303EPSS 0.5%2021-02-06

    There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause poin…

43. 7.5CVE-2021-25908EPSS 1.3%2021-01-26

    An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free.

44. 9.8CVE-2021-25907EPSS 1.6%2021-01-26

    An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed.

45. 7.5CVE-2020-36225EPSS 4.4%2021-01-26

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

46. 7.5CVE-2020-36223EPSS 4.2%2021-01-26

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

47. 5.5CVE-2020-36205EPSS 0.4%2021-01-26

    An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.

48. 7.5CVE-2020-3685EPSS 0.9%2021-01-21

    Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I…

49. 7.8CVE-2020-11217EPSS 0.2%2021-01-21

    A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

50. 7.5CVE-2020-35891EPSS 1.4%2020-12-31

    An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free.