← Back
CWE-415

943 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

JSON object

Loading...

CVEs (943)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2003-0545
1Openssl
1Openssl
Apr 16, 2026
Nov 17, 2003
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.
CVE-2003-0015
2Cvs
Freebsd
2Cvs
Freebsd
Apr 16, 2026
Feb 7, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to...Show more
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.Show less
CVE-2002-0059
1Zlib
1Zlib
Apr 16, 2026
Mar 15, 2002
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote atta...Show more
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.Show less