CWE-415: Double Free, page 8
Filter
The product calls free() twice on the same memory address.
What the weakness is: CWE-415 at MITRE
Ask an AI about CWE-415
Show the prompt
Explain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.0CVE-2025-26640EPSS 0.5%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 1.9CVE-2025-2925EPSS 0.3%
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to …
- 5.9CVE-2025-2027EPSS 0.2%
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in s…
- 7.8CVE-2023-52930EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple threads racing I915_GEM_SET_TILING to set the tiling to I915_TILING_NONE could trigger a double free…
- 7.8CVE-2022-43454EPSS 0.2%
A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.
- 2.1CVE-2024-53698EPSS 0.4%
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the …
- 4.7CVE-2025-21825EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT During the update procedure, when overwrite element in a pre-allocated htab, the freeing of old_element …
- 7.8CVE-2024-58055EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwis…
- 7.8CVE-2024-57980EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset th…
- 7.8CVE-2022-49686EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcg_video_pump A panic can occur if the endpoint becomes disabled and the uvcg_video_pump adds the request back to the req_free…
- 7.8CVE-2022-49541EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential double free during failed mount RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2088799
- 7.8CVE-2022-49530EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table(), array adev->pm.dpm.ps and its member is allocated. If the allocation of each me…
- 7.8CVE-2022-49519EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10k_halt during suspend for driver state RESTARTING Double free crash is observed when FW recovery(caused by wmi timeout/crash) is followed by immediate …
- 7.8CVE-2022-49508EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call inpu…
- 7.8CVE-2022-49455EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxl_file_register_afu info_release() will be called in device_unregister() when info->dev's reference count is 0. So there is no…
- 7.8CVE-2022-49410EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref() is called to initialize the fields of variable ref_field, which is allocated i…
- 7.8CVE-2022-49391EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtk_scp: Fix a potential double free 'scp->rproc' is allocated using devm_rproc_alloc(), so there is no need to free it explicitly in the remove function.
- 7.8CVE-2022-49384EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: md: fix double free of io_acct_set bioset Now io_acct_set is alloc and free in personality. Remove the codes that free io_acct_set in md_free and md_stop.
- 7.8CVE-2022-49290EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 ("mac80211: mesh: Free ie data when leaving mesh") fixed a memory leak on mesh leave / teardow…
- 7.8CVE-2022-49205EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix double uncharge the mem of sk_msg If tcp_bpf_sendmsg is running during a tear down operation, psock may be freed. tcp_bpf_sendmsg() tcp_bpf_send_verd…
- 5.5CVE-2022-49203EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams [Why] The issue only occurs during the GPU reset code path. We first backup the current state prior to c…
- 5.5CVE-2021-47638EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: ubifs: rename_whiteout: Fix double free for whiteout_ui->data 'whiteout_ui->data' will be freed twice if space budget fail for rename whiteout operation as following pro…
- 8.8CVE-2025-21201EPSS 1.8%
Windows Telephony Server Remote Code Execution Vulnerability
- 7.4CVE-2025-21183EPSS 0.5%
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- 7.4CVE-2025-21182EPSS 0.5%
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- 8.7CVE-2024-39564EPSS 0.4%
This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malfo…
- 5.5CVE-2025-21673EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS tar…
- 8.8CVE-2025-21291EPSS 1.4%
Windows Direct Show Remote Code Execution Vulnerability
- 7.8CVE-2024-56775EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount …
- 7.8CVE-2024-56766EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Ca…
- 8.8CVE-2024-35365EPSS 0.7%
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
- 7.8CVE-2024-56708EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens because: During modprobe: 1. In igen6_probe(), igen6_pvt will be allocated with kza…
- 7.8CVE-2024-56704EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. [Dominique: remove confusing variable reset to 0]
- 7.8CVE-2024-56699EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci: remove hotplug slot when releasing the device") the zpci_exit_slot() was moved f…
- 7.8CVE-2024-53213EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_u…
- 7.8CVE-2024-53191EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However …
- 7.0CVE-2024-49095EPSS 0.4%
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- 7.8CVE-2024-53133EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash [Why] In the case where a dml allocation fails for any reason, the current state's dml contexts would no lo…
- 7.5CVE-2024-12107EPSS 0.5%
Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS
- 9.8CVE-2024-35368EPSS 0.7%
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
- 9.8CVE-2024-11704EPSS 0.9%
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulne…
- 7.8CVE-2024-50276EPSS 0.7%
In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102x_tx_frame_spi(), so in case the TX skb room needs to be exp…
- 9.2CVE-2024-10934EPSS 0.4%
In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.
- 7.8CVE-2024-47426EPSS 0.3%
Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
- 8.8CVE-2024-49014EPSS 1.5%
SQL Server Native Client Remote Code Execution Vulnerability
- 7.8CVE-2024-43640EPSS 0.6%
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 8.1CVE-2024-43447EPSS 1.5%
Windows SMBv3 Server Remote Code Execution Vulnerability
- 7.8CVE-2024-50235EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear wdev->cqm_config pointer on free When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev…
- 7.8CVE-2024-50215EPSS 0.6%
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup() for the same controller. So it's better…
- 7.8CVE-2024-50159EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() Clang static checker(scan-build) throws below warning： | drivers/firmware/arm_scmi/driver.c:lin…