CVE & Exploit Intelligence Database

CVE-2019-11490 7.8 HIGH EPSS 0.00

An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.

CWE-415 Apr 24, 2019

CVE-2019-3829 5.3 MEDIUM EPSS 0.02

A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.

CWE-415 Mar 27, 2019

CVE-2018-3985 9.8 CRITICAL EPSS 0.01

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

CWE-415 Mar 21, 2019

CVE-2019-0122 7.1 HIGH EPSS 0.00

Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.

CWE-415 Mar 14, 2019

CVE-2019-1999 7.8 HIGH 1 PoC Analysis EPSS 0.00

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

CWE-415 Feb 28, 2019

CVE-2019-6978 9.8 CRITICAL 2 Writeups EPSS 0.04

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

CWE-415 Jan 28, 2019

CVE-2019-6455 6.5 MEDIUM 1 Writeup EPSS 0.00

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c.

CWE-415 Jan 16, 2019

CVE-2018-15518 8.8 HIGH EPSS 0.03

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

CWE-415 Dec 26, 2018

CVE-2018-20450 6.5 MEDIUM EPSS 0.00

The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2017-2897.

CWE-415 Dec 25, 2018

CVE-2018-1000877 8.8 HIGH EPSS 0.02

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.

CWE-415 Dec 20, 2018

CVE-2018-11987 7.8 HIGH EPSS 0.00

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic.

CWE-415 Dec 20, 2018

CVE-2018-9553 7.8 HIGH EPSS 0.00

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116615297.

CWE-415 Dec 06, 2018

CVE-2018-16841 6.5 MEDIUM EPSS 0.07

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.

CWE-415 Nov 28, 2018

CVE-2018-11918 7.8 HIGH EPSS 0.00

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code.

CWE-415 Nov 27, 2018

CVE-2018-11823 7.8 HIGH EPSS 0.00

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, freeing device memory in driver probe failure will result in double free issue in power module.

CWE-415 Nov 27, 2018

CVE-2018-9415 7.8 HIGH EPSS 0.00

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.

CWE-415 Nov 06, 2018

CVE-2018-9356 9.8 CRITICAL 1 PoC Analysis EPSS 0.13

In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468.

CWE-415 Nov 06, 2018

CVE-2018-18751 9.8 CRITICAL 1 Writeup EPSS 0.01

An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

CWE-415 Oct 29, 2018

CVE-2018-18718 7.8 HIGH EPSS 0.00

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.

CWE-415 Oct 29, 2018

CVE-2017-18297 7.8 HIGH EPSS 0.00

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820.

CWE-415 Oct 23, 2018