The product calls free() twice on the same memory address.
823 vulnerabilities with CWE-415
CVE-2024-47404
HIGH
OpenHarmony <4.1.0 - Privilege Escalation
CVSS 8.4
CVE-2024-3935
MEDIUM
Eclipse Mosquitto 2.0.0-2.0.18 - Double Free via Crafted PUBLISH Packet in Bridge Connection
CVSS 6.5
CVE-2024-50071
HIGH
Linux Kernel 6.11-6.11.5 - Use-After-Free in ma35_pinctrl_dt_node_to_map_func
CVSS 7.8
CVE-2024-44098
HIGH
Android - Use-After-Free in lwis_device_event_states_clear_locked
CVSS 7.4
CVE-2024-50055
HIGH
Linux Kernel - Use-After-Free in bus_register() Driver Core
CVSS 7.8
CVE-2024-49989
HIGH
Linux Kernel - Use-After-Free in AMD GPU Display Module
CVSS 7.8
CVE-2024-49983
HIGH
Linux Kernel - Use-After-Free in ext4_ext_replay_update_ex
CVSS 7.8
CVE-2024-49882
HIGH
Linux Kernel 3.7-6.11.2 - Use-After-Free in ext4_ext_try_to_merge_up
CVSS 7.8
CVE-2024-49853
HIGH
Linux Kernel 5.18-6.1.112, 6.2-6.6.53, 6.7-6.10.12, 6.11.0-6.11.1 - Use-After-Free in OPTEE SMC Transport
CVSS 7.8
CVE-2024-3187
MEDIUM
EmbedThis GoAhead <= 6.0.0 - Use-After-Free and Double Free in JST Template Parsing
CVSS 5.9
CVE-2024-45402
HIGH
picotls 2024-08-12-2024-10-10 - Double Free in TLS Handshake Message Parsing
CVSS 8.6
CVE-2024-43514
HIGH
Windows ReFS - Elevation of Privilege via Double Free
CVSS 7.8
CVE-2024-23379
MEDIUM
Qualcomm WSA8835 Firmware - Double Free in FastRPC Map Unmapping
CVSS 6.7
CVE-2024-20498
HIGH
Cisco Meraki MX and Z Series - Unauthenticated Denial of Service via Crafted HTTPS Request
CVSS 8.6
CVE-2024-46741
HIGH
Linux Kernel 6.2-6.6.50 - Use-After-Free in fastrpc_req_mmap Error Path
CVSS 7.8
CVE-2024-46736
HIGH
Linux Kernel - Use-After-Free in SMB Client Path Renaming
CVSS 7.8
CVE-2024-46687
HIGH
Linux Kernel 6.3-6.6.48, 6.7-6.10.7 - Use-After-Free in Btrfs Chunk Submission
CVSS 7.8
CVE-2024-46673
HIGH
Linux Kernel Use-After-Free in aac_probe_one
CVSS 7.8
CVE-2024-38247
HIGH
Windows Graphics Component - Privilege Escalation
CVSS 7.8
CVE-2024-38157
HIGH
Azure IoT SDK - Remote Code Execution
CVSS 7.0
CVE-2024-42234
MEDIUM
Linux Kernel 6.7-6.9.10 - Use-After-Free in Deferred Split Queue
CVSS 5.5
CVE-2024-41965
MEDIUM
Vim < 9.1.0648 - Double Free in dialog_changed()
CVSS 4.2
CVE-2024-41957
MEDIUM
Vim < 9.1.0647 - Double Free in Tagstack Data Handling
CVSS 4.5
CVE-2024-42147
HIGH
Linux Kernel - Use-After-Free in crypto hisilicon/debugfs
CVSS 7.8
CVE-2024-42138
HIGH
Linux Kernel 5.19-6.1.98 6.2-6.6.39 6.7-6.9.9 - Use-After-Free in mlxsw Linecard INI File Handling
CVSS 7.8
Details
Vulnerabilities
823
Exploit Likelihood
High