Weakness (CWE)
CWE-415: Double Free
The product calls free() twice on the same memory address.
How to prevent it (3 mitigations)
-
Architecture and Design
Choose a language that provides automatic memory management.
-
Implementation
Ensure that each allocation is freed only once. After freeing a chunk, set the pointer to NULL to ensure the pointer cannot be freed again. In complicated error conditions, be sure that clean-up routines respect the state of allocation properly. If the language is object oriented, ensure that object destructors delete each chunk of memory only once.
-
Implementation
Use a static analysis tool to find double free instances.
Source: MITRE CWE-415
316 results · Clear filters · Feed
-
High 7.1
L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream…
-
High 7.8
Photoshop Desktop | Double Free (CWE-415)
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user int…
-
High 7.0
Windows Kerberos Elevation of Privilege Vulnerability
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Internet Information Services Denial of Service Vulnerability
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
-
High 7.8
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.0
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows BitLocker Elevation of Privilege Vulnerability
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Shell Remote Code Execution Vulnerability
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Error Reporting Remote Code Execution Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
-
High 7.0
Windows TCP/IP Elevation of Privilege Vulnerability
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows libarchive Remote Code Execution Vulnerability
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
-
High 8.5
Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an …
-
High 7.8
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could …
-
High 7.8
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.
-
High 8.8
Double Free in lwIP (lightweight IP)
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
-
High 8.6
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vul…
-
High 8.2
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
-
High 7.8
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1…
-
High 7.0
NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen
NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary o…
-
High 8.8
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially ex…
-
High 7.8
Acrobat Reader | Double Free (CWE-415)
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Display Enhancement Service Elevation of Privilege Vulnerability
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hello Elevation of Privilege Vulnerability
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
-
High 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.