← Back
CWE-415

781 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

JSON object

Loading...

CVEs (781)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-10536
1Qualcomm
47Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+44 more
Nov 21, 2024
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electroni...Show more
Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Show less
CVE-2019-10517
1Qualcomm
33Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+30 more
Nov 21, 2024
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdrag...Show more
Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996AU, QCS405, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Show less
CVE-2019-19725
3Canonical
DebianSysstat Project
3Debian Linux
SysstatUbuntu Linux
Nov 21, 2024
Dec 11, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.
CVE-2019-2266
1Qualcomm
16Apq8053 Firmware
Ipq4019 FirmwareIpq8064 Firmware+13 more
Nov 21, 2024
Nov 21, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdrag...Show more
Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, Nicobar, QCA9980, QCS405, QCS605, SDM845, SDX24, SM7150, SM8150Show less
CVE-2019-5282
1Huawei
7Emily Al00a Firmware
Emily L09c FirmwareEmily L29c Firmware+4 more
Nov 21, 2024
Nov 13, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), V...Show more
Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution.Show less
CVE-2011-1803
1Google
1Blink
Nov 21, 2024
Nov 12, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element.
CVE-2011-2335
1Google
1Blink
Nov 21, 2024
Nov 12, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.
CVE-2019-18874
1Psutil Project
1Psutil
Nov 21, 2024
Nov 12, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
CVE-2019-10565
1Qualcomm
13Apq8053 Firmware
Mdm9206 FirmwareMdm9207c Firmware+10 more
Nov 21, 2024
Nov 6, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consume...Show more
Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130Show less
CVE-2019-17545
5Debian
FedoraprojectOpensuse+2 more
6Backports Sle
Debian LinuxFedora+3 more
Nov 21, 2024
Oct 14, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
CVE-2019-11932
2Android Gif Drawable Project
Whatsapp
2Android Gif Drawable
Whatsapp
Nov 21, 2024
Oct 3, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications,...Show more
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.Show less
CVE-2019-16880
1Linea Project
1Linea
Nov 21, 2024
Sep 25, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.
CVE-2019-5481
6Debian
FedoraprojectHaxx+3 more
12Cloud Backup
Communications Operations MonitorCommunications Session Border Controller+9 more
Apr 16, 2026
Sep 16, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2019-2115
1Google
1Android
Nov 21, 2024
Sep 5, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution pri...Show more
In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2017-18595
2Linux
Opensuse
2Leap
Linux Kernel
Nov 21, 2024
Sep 4, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.
CVE-2017-18594
1Nmap
1Nmap
Nov 21, 2024
Aug 29, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
CVE-2018-20996
1Crossbeam Project
1Crossbeam
Nov 21, 2024
Aug 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
CVE-2019-15551
1Servo
1Smallvec
Nov 21, 2024
Aug 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.
CVE-2018-20991
1Servo
1Smallvec
Nov 21, 2024
Aug 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
CVE-2019-15504
2Canonical
Linux
2Linux Kernel
Ubuntu Linux
Nov 21, 2024
Aug 23, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).