← Back
CWE-415

876 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

JSON object

Loading...

CVEs (876)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-5236
1Huawei
1Emily L29c Firmware
Jun 17, 2026
Aug 8, 2019
N/A· v4
6.3 MEDIUM· v3
6.8 MEDIUM· v2
Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An...Show more
Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An attacker can trick a user to click a URL to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.Show less
CVE-2018-20961
1Linux
1Linux Kernel
Nov 21, 2024
Aug 7, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have...Show more
In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.Show less
CVE-2019-13105
1Denx
1U Boot
Jun 17, 2026
Aug 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.
CVE-2019-5460
2Opensuse
Videolan
3Backports
LeapVlc Media Player
Jun 17, 2026
Jul 30, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Double Free in VLC versions <= 3.0.6 leads to a crash.
CVE-2019-1020014
3Canonical
DockerFedoraproject
3Credential Helpers
FedoraUbuntu Linux
Jun 17, 2026
Jul 29, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
docker-credential-helpers before 0.6.3 has a double free in the List functions.
CVE-2019-3896
2Linux
Redhat
5Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Server Aus+2 more
Jun 17, 2026
Jun 19, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
CVE-2019-12874
1Videolan
1Vlc Media Player
Jun 17, 2026
Jun 18, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
CVE-2019-12865
1Radare
1Radare2
Jun 17, 2026
Jun 17, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
CVE-2018-11947
1Qualcomm
42Ipq8064 Firmware
Mdm9150 FirmwareMdm9206 Firmware+39 more
Nov 21, 2024
Jun 14, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...Show more
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8064, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24Show less
CVE-2019-2096
1Google
1Android
Jun 17, 2026
Jun 7, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User...Show more
In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-123237974.Show less
CVE-2019-5305
1Huawei
1Mate 10 Firmware
Jun 17, 2026
Jun 6, 2019
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the ap...Show more
The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash.Show less
CVE-2019-5219
1Huawei
1Mate 10 Firmware
Jun 17, 2026
Jun 6, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which ma...Show more
There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful exploit could cause a denial of service condition.Show less
CVE-2019-7080
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Jun 17, 2026
May 24, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful exploitation could...Show more
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary code execution .Show less
CVE-2019-2247
1Qualcomm
38Mdm9150 Firmware
Mdm9206 FirmwareMdm9607 Firmware+35 more
Jun 17, 2026
May 24, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdra...Show more
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24Show less
CVE-2016-9969
1Webmproject
1Libwebp
Nov 21, 2024
May 23, 2019
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
In libwebp 0.5.1, there is a double free bug in libwebpmux.
CVE-2019-7784
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Jun 17, 2026
May 22, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a double f...Show more
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2019-12219
1Libsdl
2Sdl2 Image
Simple Directmedia Layer
Jun 17, 2026
May 20, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_...Show more
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.Show less
CVE-2019-11490
1Nmap
1Npcap
Jun 17, 2026
Apr 24, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbi...Show more
An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.Show less
CVE-2019-3829
2Fedoraproject
Gnu
2Fedora
Gnutls
Jun 17, 2026
Mar 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates...Show more
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.Show less
CVE-2018-3985
1Getcujo
1Smart Firewall
Nov 21, 2024
Mar 21, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary cod...Show more
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.Show less