CVE & Exploit Intelligence Database

CVE-2022-23459 8.1 HIGH EPSS 0.00

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may point to alterable data where the pointer itself is not updated. This issue exists on the current commit of the jsonxx project. The project itself has been archived and updates are not expected. Users are advised to find a replacement.

CWE-415 Aug 19, 2022

CVE-2022-31614 7.0 HIGH EPSS 0.00

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information disclosure.

CWE-415 Aug 05, 2022

CVE-2022-2509 7.5 HIGH EPSS 0.01

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

CWE-415 Aug 01, 2022

CVE-2022-27864 8.8 HIGH EPSS 0.01

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CWE-415 Jul 29, 2022

CVE-2022-36234 7.5 HIGH 1 PoC Analysis EPSS 0.00

SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets.

CWE-415 Jul 28, 2022

CVE-2022-2008 8.8 HIGH EPSS 0.01

Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-415 Jul 28, 2022

CVE-2022-2327 7.5 HIGH EPSS 0.00

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

CWE-415 Jul 22, 2022

CVE-2022-32962 6.8 MEDIUM EPSS 0.00

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

CWE-415 Jul 20, 2022

CVE-2022-31117 5.9 MEDIUM 1 Writeup EPSS 0.00

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.

CWE-415 Jul 05, 2022

CVE-2021-41688 7.5 HIGH EPSS 0.00

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

CWE-415 Jun 28, 2022

CVE-2022-34495 5.5 MEDIUM 1 Writeup EPSS 0.00

rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

CWE-415 Jun 26, 2022

CVE-2022-34494 5.5 MEDIUM 1 Writeup EPSS 0.00

rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

CWE-415 Jun 26, 2022

CVE-2022-33033 7.8 HIGH EPSS 0.00

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.

CWE-415 Jun 23, 2022

CVE-2022-31291 7.5 HIGH EPSS 0.00

An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.

CWE-415 Jun 16, 2022

CVE-2021-39806 7.8 HIGH EPSS 0.00

In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215387420

CWE-415 Jun 15, 2022

CVE-2022-20127 9.8 CRITICAL EPSS 0.05

In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221862119

CWE-415 Jun 15, 2022

CVE-2022-22103 7.8 HIGH EPSS 0.00

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto

CWE-415 Jun 14, 2022

CVE-2022-22086 7.3 HIGH EPSS 0.00

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE-415 Jun 14, 2022

CVE-2022-21758 6.7 MEDIUM EPSS 0.00

In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06439600; Issue ID: ALPS06439600.

CWE-415 Jun 06, 2022

CVE-2021-42613 7.8 HIGH EPSS 0.00

A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document.

CWE-415 May 24, 2022