Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

CVEs (943)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-4091 2Port389 Redhat 8389 Ds Base Enterprise Linux DesktopEnterprise Linux For Ibm Z Systems+5 more Jun 17, 2026 Feb 18, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
CVE-2021-22600 3Debian LinuxNetapp 118300 Firmware 8700 FirmwareA400 Firmware+8 more Jun 17, 2026 Jan 26, 2022 N/A· v4 7.0 HIGH· v3 7.2 HIGH· v2 A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions...Show more A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755Show less
CVE-2022-23012 1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 more Jun 17, 2026 Jan 25, 2022 N/A· v4 7.5 HIGH· v3 7.1 HIGH· v2 On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note:...Show more On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.Show less
CVE-2021-40574 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and esc...Show more The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.Show less
CVE-2021-40573 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service.
CVE-2021-40572 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service.
CVE-2021-40571 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
CVE-2021-40570 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
CVE-2021-40569 1Gpac 1Gpac Jun 17, 2026 Jan 13, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a denial of service.
CVE-2021-37529 2Debian Fig2dev Project 2Debian Linux Fig2dev Jun 17, 2026 Jan 12, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
CVE-2021-40038 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVE-2021-37120 1Huawei 2Emui Magic Ui Jun 17, 2026 Jan 3, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.
CVE-2021-45288 1Gpac 1Gpac Jun 17, 2026 Dec 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.
CVE-2021-44732 3Arm DebianTrustedfirmware 3Debian Linux Mbed TlsMbed Tls Jun 17, 2026 Dec 20, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
CVE-2021-37072 1Huawei 1Harmonyos Jun 17, 2026 Dec 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.
CVE-2021-43268 1Windriver 1Vxworks Jun 17, 2026 Nov 24, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
CVE-2021-40873 1Softing 7Datafeed Opc Suite EdgeconnectorOpc+4 more Jun 17, 2026 Nov 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or serv...Show more An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.Show less
CVE-2021-1119 1Nvidia 1Virtual Gpu Jun 17, 2026 Oct 29, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allow...Show more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allowing an attacker to execute arbitrary code impacting integrity and availability.Show less
CVE-2021-21797 1Gonitro 1Nitro Pro Jun 17, 2026 Oct 18, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed,...Show more An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.Show less
CVE-2021-25477 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.

Previous 1...303132...48 Next