cve.bz

CWE-415: Double Free, page 2

Filter

The product calls free() twice on the same memory address.

What the weakness is: CWE-415 at MITRE

Ask an AI about CWE-415

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.2CVE-2026-20532EPSS 0.1%

    In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID:…

  2. 7.8CVE-2026-47558EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free of imported memory state. A successful exploit of this vulnerability might lead to code execution, d…

  3. 7.0CVE-2026-98154EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -EIO, the RDMA queue_rq path reports a host path error and then still cleans up the command and unmaps the SQE DMA. The …

  4. 9.9CVE-2026-89078EPSS 0.5%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on t…

  5. 7.8CVE-2026-6794EPSS 0.2%

    IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

  6. 8.7CVE-2026-91018EPSS 0.4%

    lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.

  7. 6.9CVE-2026-11388EPSS 0.1%

    Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6.

  8. 5.7CVE-2026-17050EPSS 0.2%

    The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from the dedicated usb_device_heap in usbh_device_set_configuration() (subsys/usb/host/usbh_device.c). On three failure paths — a faile…

  9. 8.6CVE-2026-20135EPSS 0.7%

    A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS)…

  10. 9.8CVE-2026-84561EPSS 0.7%

    A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app …

  11. 5.5CVE-2026-84558EPSS 0.2%

    A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

  12. 8.2CVE-2026-85921EPSS 0.3%

    Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  13. 4.2CVE-2026-23790EPSS 0.1%

    An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer …

  14. 7.8CVE-2026-23789EPSS 0.2%

    An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC enco…

  15. 7.3CVE-2026-57842EPSS 0.1%

    NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execu…

  16. 7.1CVE-2026-61915EPSS 0.3%

    An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or …

  17. 8.8CVE-2026-87585EPSS 0.4%

    Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

  18. 7.8CVE-2026-79907EPSS 0.3%

    Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  19. 7.8CVE-2026-81950EPSS 0.5%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 8.8CVE-2026-80080EPSS 0.8%

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  21. 8.8CVE-2026-77504EPSS 0.8%

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  22. 9.8CVE-2026-77493EPSS 1.0%

    Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  23. 8.2CVE-2026-72958EPSS 0.3%

    Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-71353EPSS 0.3%

    Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-71351EPSS 0.3%

    Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  26. 6.4CVE-2026-71338EPSS 0.3%

    Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-70567EPSS 0.3%

    Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-70562EPSS 0.3%

    Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  29. 8.0CVE-2026-69876EPSS 0.6%

    Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

  30. 7.8CVE-2026-69725EPSS 0.3%

    Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-69398EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  32. 7.1CVE-2026-69337EPSS 0.6%

    Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

  33. 8.0CVE-2026-69322EPSS 0.8%

    Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

  34. 7.0CVE-2026-69309EPSS 0.3%

    Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-69292EPSS 0.3%

    Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.

  36. 8.1CVE-2026-55007EPSS 0.7%

    Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

  37. 6.8CVE-2026-82325EPSS 0.1%

    A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

  38. 6.7CVE-2026-20510EPSS 0.2%

    In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for explo…

  39. 7.5CVE-2026-33630EPSS 0.8%

    c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel'…

  40. 8.2CVE-2026-84964EPSS 0.3%

    A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same…

  41. 7.5CVE-2026-52023EPSS 0.4%

    An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifically the pcscf_save_pending/save_pending path and security-agreement parsing in sec_agree.c:parse_sec…

  42. 1.9CVE-2026-82677EPSS 0.3%

    A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remot…

  43. 8.7CVE-2026-19316EPSS 0.5%

    A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

  44. 8.2CVE-2026-75159EPSS 0.5%

    An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling cond…

  45. 7.5CVE-2026-18798EPSS 1.7%

    Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server proc…

  46. 7.5CVE-2026-47895EPSS 0.4%

    In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

  47. 5.5CVE-2026-45202EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order …

  48. 7.1CVE-2026-63652EPSS 0.6%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats in channels/rdpsnd/server/rdpsnd_main.c frees context->client_formats on a malformed Client Audio Formats PDU without clearing the…

  49. 7.8CVE-2026-72102EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resume fails, the kernel attempts to free table with dm_table_destroy, but the table was already insta…

  50. 5.9CVE-2026-18663EPSS 0.5%

    A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPI_REQCONTROLS pblock slot. Operation teardown the…