CWE-415

High likelihood

Double Free

Parent: CWE-825 - Expired Pointer Dereference

The product calls free() twice on the same memory address.

823 vulnerabilities with CWE-415
CVE-2022-25668 HIGH
Qualcomm APQ8009 Firmware - Memory Corruption via Double Free in Video Driver
CVSS 7.3
CVE-2022-39170 HIGH
libdwarf 0.4.1 - Double Free in dwarf_frame.c
CVSS 8.8
CVE-2022-2519 MEDIUM
libtiff 4.4.0rc1 - Memory Corruption
CVSS 6.5
CVE-2022-23459 HIGH
Json++ - Double Free in Value Class Assignment
CVSS 8.1
CVE-2022-31614 HIGH
NVIDIA Virtual GPU 11.0-11.8 - Use-After-Free in Virtual GPU Manager
CVSS 7.0
CVE-2022-2509 HIGH
GnuTLS - Double Free in PKCS7 Signature Verification
CVSS 7.5
CVE-2022-27864 HIGH
Autodesk Design Review - Remote Code Execution via Double Free in PDF Handling
CVSS 8.8
CVE-2022-36234 HIGH
SimpleNetwork TCP Server - Memory Corruption
CVSS 7.5
CVE-2022-2008 HIGH
Google Chrome < 102.0.5005.115 - Use-After-Free in WebGL
CVSS 8.8
CVE-2022-2327 HIGH
Linux Kernel - Use-After-Free in io_uring Work Flags Handling
CVSS 7.5
CVE-2022-32962 MEDIUM
HiCOS Natural Person Credential Component Client - Unauthenticated Double Free
CVSS 6.8
CVE-2022-31117 MEDIUM
UltraJSON <5.4.0 - Memory Corruption
CVSS 5.9
CVE-2022-34495 MEDIUM
Linux Kernel < 5.18.4 - Double Free in rpmsg_probe
CVSS 5.5
CVE-2022-34494 MEDIUM
Linux Kernel < 5.18.4 - Double Free in rpmsg_virtio_add_ctrl_dev
CVSS 5.5
CVE-2022-33033 HIGH
LibreDWG <0.12.4.4608 - Use After Free
CVSS 7.8
CVE-2022-31291 HIGH
dlt-daemon <2.18.8 - Memory Corruption
CVSS 7.5
CVE-2022-20127 CRITICAL
Android - Use-After-Free in ce_t4t_data_cback
CVSS 9.8
CVE-2022-22103 HIGH
Snapdragon Auto - Memory Corruption
CVSS 7.8
CVE-2022-22086 HIGH
Snapdragon Auto - Memory Corruption
CVSS 7.3
CVE-2022-21758 MEDIUM
Android - Double Free in CCU
CVSS 6.7
CVE-2022-29032 HIGH
JT2Go, Teamcenter Visualization <13.3.0.3, 14.0.0.1 - RCE
CVSS 7.8
CVE-2022-28738 CRITICAL
Ruby <3.0.4, <3.1.2 - Memory Corruption
CVSS 9.8
CVE-2022-29156 HIGH
Linux kernel <5.16.12 - Use After Free
CVSS 7.8
CVE-2022-27416 HIGH
Tcpreplay v4.4.1 - Double Free via __interceptor_free
CVSS 7.8
CVE-2022-25796 HIGH
Autodesk Navisworks 2022-2022.2 - Remote Code Execution via DWF File Double Free
CVSS 7.8
Details
Vulnerabilities 823
Exploit Likelihood High