cve.bz

CWE-415: Double Free, page 16

Filter

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

Ask an AI about CWE-415

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2019-20014EPSS 1.5%

    An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.

  2. 9.8CVE-2019-11049EPSS 4.2%

    In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can resul…

  3. 7.8CVE-2019-8635EPSS 0.4%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

  4. 7.8CVE-2019-10536EPSS 0.2%

    Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sn…

  5. 7.8CVE-2019-10517EPSS 0.2%

    Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, S…

  6. 9.8CVE-2019-19725EPSS 2.6%

    sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.

  7. 7.8CVE-2019-2266EPSS 0.2%

    Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, S…

  8. 7.8CVE-2019-5282EPSS 0.8%

    Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier tha…

  9. 6.5CVE-2011-1803EPSS 0.5%

    An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element.

  10. 7.5CVE-2011-2335EPSS 0.6%

    A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.

  11. 7.5CVE-2019-18874EPSS 3.5%

    psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

  12. 9.8CVE-2019-10565EPSS 0.7%

    Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon I…

  13. 9.8CVE-2019-17545EPSS 2.6%

    GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

  14. 8.8CVE-2019-11932ExploitEPSS 45%

    A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote atta…

  15. 9.8CVE-2019-16880EPSS 1.7%

    An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.

  16. 9.8CVE-2019-5481EPSS 7.5%

    Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

  17. 7.8CVE-2019-2115EPSS 0.3%

    In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. Use…

  18. 7.8CVE-2017-18595EPSS 0.4%

    An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.

  19. 7.5CVE-2017-18594EPSS 3.2%

    nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

  20. 9.8CVE-2018-20996EPSS 1.7%

    An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.

  21. 9.8CVE-2019-15551EPSS 1.9%

    An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.

  22. 9.8CVE-2018-20991EPSS 1.8%

    An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.

  23. 9.8CVE-2019-15504EPSS 4.3%

    drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).

  24. 9.8CVE-2019-8044ExploitEPSS 14%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a double free vulnerability. …

  25. 8.8CVE-2019-2126EPSS 5.5%

    In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed fo…

  26. 4.6CVE-2019-15212EPSS 0.8%

    An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.

  27. 9.8CVE-2019-15151EPSS 2.1%

    AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.

  28. 8.8CVE-2019-1144ExploitEPSS 13%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  29. 6.3CVE-2019-5236EPSS 0.6%

    Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An attacker can trick …

  30. 9.8CVE-2018-20961EPSS 6.3%

    In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other …

  31. 7.8CVE-2019-13105EPSS 1.3%

    Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

  32. 5.5CVE-2019-5460EPSS 2.5%

    Double Free in VLC versions <= 3.0.6 leads to a crash.

  33. 5.5CVE-2019-1020014EPSS 0.4%

    docker-credential-helpers before 0.6.3 has a double free in the List functions.

  34. 7.8CVE-2019-3896EPSS 0.4%

    A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).

  35. 9.8CVE-2019-12874EPSS 2.4%

    An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.

  36. 5.5CVE-2019-12865EPSS 0.9%

    In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.

  37. 5.5CVE-2018-11947EPSS 0.2%

    The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag…

  38. 7.8CVE-2019-2096EPSS 0.2%

    In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not …

  39. 5.5CVE-2019-5305EPSS 0.6%

    The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call …

  40. 5.5CVE-2019-5219EPSS 0.5%

    There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple proces…

  41. 9.8CVE-2019-7080EPSS 5.0%

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary …

  42. 7.8CVE-2019-2247EPSS 0.2%

    Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  43. 7.5CVE-2016-9969EPSS 1.4%

    In libwebp 0.5.1, there is a double free bug in libwebpmux.

  44. 9.8CVE-2019-7784EPSS 6.6%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a double free vulnerability. …

  45. 8.8CVE-2019-12219EPSS 2.0%

    An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.

  46. 7.8CVE-2019-11490EPSS 0.7%

    An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executin…

  47. 7.5CVE-2019-3829EPSS 59%

    A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 …

  48. 9.8CVE-2018-3985EPSS 1.9%

    An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the …

  49. 7.1CVE-2019-0122EPSS 0.3%

    Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.

  50. 7.8CVE-2019-1999ExploitEPSS 0.8%

    In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not ne…