CWE-415— Double Free
The product calls free() twice on the same memory address.— MITRE CWE catalog
966 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-415page 10 of 20
- CVE-2024-26932HIGHCVSS 7.8EG 7.82024-05-01
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() When unregister pd capabilitie in tcpm, KASAN will capture below double -free issue. The root cause …
- CVE-2024-26930HIGHCVSS 7.8EG 7.82024-05-01
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00…
- CVE-2022-48649HIGHCVSS 7.8EG 7.82024-04-28
In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug test, kfence's 'test_memcache_typesafe_by_rcu' kunit test case cause a use-after-free error:…
- CVE-2024-26257HIGHCVSS 7.8EG 7.82024-04-09
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2024-26792HIGHCVSS 7.8EG 7.82024-04-04
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after snapshot creation failure When creating a snapshot we may do a double free of an anonymous device in case there's an err…
- CVE-2024-26782HIGHCVSS 7.8EG 7.82024-04-04
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inet_opt' for the ne…
- CVE-2024-26748HIGHCVSS 7.8EG 7.82024-04-03
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if (request->complete) { 830 spin_unlock(&priv_dev->lock); 831 usb_gadget_giveback_requ…
- CVE-2024-26704HIGHCVSS 7.8EG 7.82024-04-03
In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), moved_len is only updated when all moves are successfully executed, and only disca…
- CVE-2024-26694HIGHCVSS 7.8EG 7.82024-04-03
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv->fw area, which is cleared at the end of de…
- CVE-2024-26653HIGHCVSS 7.8EG 7.82024-04-01
In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function ljca_auxdev…
- CVE-2021-47123HIGHCVSS 7.8EG 7.82024-03-15
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_link_timeout_fn() from the master request link list, otherwise we may get use-after…
- CVE-2021-47082HIGHCVSS 7.8EG 7.82024-03-04
In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_in…
- CVE-2020-36785HIGHCVSS 7.8EG 7.82024-02-28
In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_buf" is freed along with all the other items on the "asd->s3a_stats" list. It leads to a do…
- CVE-2021-46938HIGHCVSS 7.8EG 7.82024-02-27
In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loading a device-mapper table for a request-based mapped device, and the allocation/in…
- CVE-2023-52439HIGHCVSS 7.8EG 7.82024-02-20
In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------------------------- uio_unregister_device uio_open idev = idr_find() device…
- CVE-2022-2588HIGHCVSS 7.8EG 7.82024-01-08
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
- CVE-2023-40103HIGHCVSS 7.8EG 7.82023-12-04
In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2023-48013HIGHCVSS 7.8EG 7.82023-11-15
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.
- CVE-2023-45679HIGHCVSS 7.8EG 7.82023-10-21
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, but some of the pointers in `f->comment_lis…
- CVE-2023-36420HIGHCVSS 7.8EG 7.82023-10-10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36418HIGHCVSS 7.8EG 7.82023-10-10
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
- CVE-2023-41374HIGHCVSS 7.8EG 7.82023-09-20
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1…
- CVE-2023-35371HIGHCVSS 7.8EG 7.82023-08-08
Microsoft Office Remote Code Execution Vulnerability
- CVE-2023-33161HIGHCVSS 7.8EG 7.82023-07-11
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-33137HIGHCVSS 7.8EG 7.82023-06-14
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-29366HIGHCVSS 7.8EG 7.82023-06-14
Windows Geolocation Service Remote Code Execution Vulnerability
- CVE-2023-21106HIGHCVSS 7.8EG 7.82023-05-15
In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati…
- CVE-2023-28464HIGHCVSS 7.8EG 7.82023-03-31
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escal…
- CVE-2022-4744HIGHCVSS 7.8EG 7.82023-03-30
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or po…
- CVE-2023-21030HIGHCVSS 7.8EG 7.82023-03-24
In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User intera…
- CVE-2023-23402HIGHCVSS 7.8EG 7.82023-03-14
Windows Media Remote Code Execution Vulnerability
- CVE-2022-40683HIGHCVSS 7.8EG 7.82023-02-16
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands
- CVE-2022-40304HIGHCVSS 7.8EG 7.82022-11-23
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
- CVE-2022-3238HIGHCVSS 7.8EG 7.82022-11-14
A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- CVE-2022-25660HIGHCVSS 7.8EG 7.82022-10-19
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2022-36043HIGHCVSS 7.8EG 7.82022-09-06
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bin_reloc_storage_free() when freeing relocations generated from qnx binary plugin. A user o…
- CVE-2022-2327HIGHCVSS 7.8EG 7.82022-07-22
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect …
- CVE-2022-33033HIGHCVSS 7.8EG 7.82022-06-23
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.
- CVE-2021-39806HIGHCVSS 7.8EG 7.82022-06-15
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure,…
- CVE-2022-22103HIGHCVSS 7.8EG 7.82022-06-14
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto
- CVE-2021-42613HIGHCVSS 7.8EG 7.82022-05-24
A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document.
- CVE-2022-29032HIGHCVSS 7.8EG 7.82022-05-20
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library contains a doubl…
- CVE-2022-29156HIGHCVSS 7.8EG 7.82022-04-13
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
- CVE-2022-27416HIGHCVSS 7.8EG 7.82022-04-12
Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
- CVE-2022-25796HIGHCVSS 7.8EG 7.82022-04-11
A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must …
- CVE-2022-28390HIGHCVSS 7.8EG 7.82022-04-03
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
- CVE-2021-42533HIGHCVSS 7.8EG 7.82022-03-16
Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user inter…
- CVE-2021-46625HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-46621HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-40574HIGHCVSS 7.8EG 7.82022-01-13
The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileg…
Map vulnerabilities like CWE-415 to your infrastructure
EchelonGraph correlates every CVE — across CWE-415 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →