CVE & Exploit Intelligence Database

CVE-2020-36223 7.5 HIGH EPSS 0.07

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

CWE-125 Jan 26, 2021

CVE-2020-36205 5.5 MEDIUM EPSS 0.00

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.

CWE-415 Jan 26, 2021

CVE-2020-3685 7.5 HIGH EPSS 0.00

Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE-415 Jan 21, 2021

CVE-2020-11217 7.8 HIGH EPSS 0.00

A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE-415 Jan 21, 2021

CVE-2020-35891 7.5 HIGH EPSS 0.00

An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free.

CWE-415 Dec 31, 2020

CVE-2020-35885 9.8 CRITICAL EPSS 0.00

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation.

CWE-415 Dec 31, 2020

CVE-2020-35862 9.8 CRITICAL EPSS 0.01

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.

CWE-415 Dec 31, 2020

CVE-2019-25009 9.8 CRITICAL EPSS 0.00

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

CWE-415 Dec 31, 2020

CVE-2020-16590 5.5 MEDIUM EPSS 0.00

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

CWE-415 Dec 09, 2020

CVE-2020-15710 5.3 MEDIUM EPSS 0.00

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

CWE-415 Nov 19, 2020

CVE-2020-17019 7.8 HIGH EPSS 0.12

Microsoft Excel Remote Code Execution Vulnerability

CWE-415 Nov 11, 2020

CVE-2020-16970 8.1 HIGH EPSS 0.00

Azure Sphere Unsigned Code Execution Vulnerability

CWE-415 Nov 11, 2020

CVE-2020-9747 7.8 HIGH EPSS 0.04

Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

CWE-415 Oct 21, 2020

CVE-2020-1686 7.5 HIGH EPSS 0.00

On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigged by a malformed IPv6 packet destined to the Routing Engine. An attacker can repeatedly send the offending packet resulting in an extended Denial of Service condition. Only IPv6 packets can trigger this issue. IPv4 packets cannot trigger this issue. This issue affects Juniper Networks Junos OS 18.4 versions prior to 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2. This issue does not affect Juniper Networks Junos OS prior to 18.4R1.

CWE-415 Oct 16, 2020

CVE-2020-27153 8.6 HIGH 1 Writeup EPSS 0.02

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

CWE-415 Oct 15, 2020

CVE-2020-25637 6.7 MEDIUM 1 PoC Analysis EPSS 0.00

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CWE-415 Oct 06, 2020

CVE-2020-5988 7.1 HIGH EPSS 0.00

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

CWE-415 Oct 02, 2020

CVE-2020-24698 9.8 CRITICAL EPSS 0.00

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature.

CWE-415 Oct 02, 2020

CVE-2020-25773 7.8 HIGH EPSS 0.01

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file.

CWE-415 Sep 29, 2020

CVE-2020-0392 7.8 HIGH 1 PoC Analysis EPSS 0.00

In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-150226608

CWE-415 Sep 17, 2020