CWE-415

High likelihood

Double Free

Parent: CWE-825 - Expired Pointer Dereference

The product calls free() twice on the same memory address.

823 vulnerabilities with CWE-415
CVE-2022-40507 HIGH
Qualcomm 315 5G IoT Modem Firmware - Memory Corruption via Double Free in Core
CVSS 8.4
CVE-2022-33307 HIGH
Qualcomm AQT1000 Firmware - Memory Corruption via Double Free in Automotive HLOS Address Handling
CVSS 8.4
CVE-2022-33227 MEDIUM
Qualcomm AQT1000 Firmware - Memory Corruption via Double Free in Provider Registration
CVSS 6.7
CVE-2022-33231 CRITICAL
Product <Version - Memory Corruption
CVSS 9.3
CVE-2022-4744 HIGH
Linux Kernel 5.5-5.10.135 - Double Free in TUN/TAP Device Registration
CVSS 7.8
CVE-2022-40515 HIGH
Qualcomm APQ8009 Firmware - Memory Corruption via Double Free in Video 3GP Clip Metadata Parsing
CVSS 7.3
CVE-2022-3707 MEDIUM
Linux Kernel < 6.1 - Double Free in Intel GVT-g Graphics Driver
CVSS 5.5
CVE-2022-20803 HIGH
ClamAV 0.104.0-0.104.2 - Unauthenticated Denial of Service via OLE2 File Parser Double Free
CVSS 8.6
CVE-2022-40683 HIGH
Fortinet FortiWeb 7.0.0-7.0.3 - Double Free via Crafted Commands
CVSS 7.8
CVE-2022-4450 HIGH
OpenSSL 1.1.1-1.1.1s - Double Free in PEM_read_bio_ex
CVSS 7.5
CVE-2022-3806 CRITICAL
Zephyr < 3.2.0 - Double Free in Bluetooth HCI Error Handling
CVSS 9.8
CVE-2022-25717 MEDIUM
Qualcomm APQ8096AU Firmware - Memory Corruption via Double Free in Display Frame Buffer Allocation
CVSS 6.7
CVE-2022-47975 HIGH
Huawei EMUI and HarmonyOS < 2.0 - Double Free in DUBAI Module
CVSS 7.5
CVE-2022-44640 CRITICAL
Heimdal < 7.7.1 - Remote Code Execution via ASN.1 Codec Double Free
CVSS 9.8
CVE-2022-40304 HIGH
libxml2 < 2.10.3 - Use-After-Free via Corrupted Hash Table Key
CVSS 7.8
CVE-2022-3238 HIGH
Linux Kernel - Double Free in NTFS3 Subsystem via Simultaneous Remount and Umount
CVSS 7.8
CVE-2022-32614 MEDIUM
Android - Use-After-Free in Audio Component
CVSS 6.7
CVE-2022-42915 HIGH
curl 7.77.0-7.85.0 - Double Free via HTTP Proxy CONNECT Error Handling
CVSS 8.1
CVE-2022-32574 MEDIUM
Abode Systems iota All-In-One Security Kit 6.9X and 6.9Z - Authenticated Double Free in Web Interface
CVSS 6.5
CVE-2022-25750 HIGH
Qualcomm Kailua Firmware - Memory Corruption via Double Free in BTHOST
CVSS 8.4
CVE-2022-25660 HIGH
Qualcomm AQT1000 Firmware - Memory Corruption via Double Free in Kernel
CVSS 7.8
CVE-2022-3595 LOW
Linux Kernel < 6.1 - Use-After-Free in CIFS Handler sess_free_buffer
CVSS 3.5
CVE-2022-0699 CRITICAL
shapelib < 1.5.0 - Double Free in shpsort.c
CVSS 9.8
CVE-2022-39002 CRITICAL
Huawei EMUI, HarmonyOS, and Magic UI - Double Free in Storage Module
CVSS 9.8
CVE-2022-36043 HIGH
rizin < 0.4.0 - Use-After-Free in QNX Binary Relocation Handler
CVSS 7.8
Details
Vulnerabilities 823
Exploit Likelihood High