CWE-415

High likelihood

Double Free

Parent: CWE-825 - Expired Pointer Dereference

The product calls free() twice on the same memory address.

823 vulnerabilities with CWE-415
CVE-2021-25907 CRITICAL
containers < 0.9.11 - Double Free via Panic in util::mutate
CVSS 9.8
CVE-2020-37239 CRITICAL
libbabl 0.1.62 Broken Double Free Detection Memory Safety
CVSS 9.8
CVE-2020-36785 HIGH
Linux Kernel 5.8-5.10.36 - Use-After-Free in atomisp_alloc_css_stat_bufs
CVSS 7.8
CVE-2020-27794 CRITICAL
radare2 < 4.4.0 - Double Free in cmd_info()
CVSS 9.1
CVE-2020-14123 HIGH
MIUI - Double Free in Some MIUI Services
CVSS 7.5
CVE-2020-36434 CRITICAL
sys-info < 0.8.0 - Double Free in Disk Info Function
CVSS 9.8
CVE-2020-36401 HIGH
mruby 2.1.2 - Use-After-Free in mrb_default_allocf
CVSS 7.8
CVE-2020-14354 LOW
c-ares 1.16.0 - Use-After-Free in ares_destroy()
CVSS 3.3
CVE-2020-36318 CRITICAL
Rust 1.48.0-1.48.4 - Use-After-Free in VecDeque::make_contiguous
CVSS 9.8
CVE-2020-11246 HIGH
Qualcomm APQ8017 Firmware - Double Free in Secure Playback Suspend Mode
CVSS 8.4
CVE-2020-11231 MEDIUM
Qualcomm APQ8017 Firmware - Use-After-Free via Concurrent Function Calls
CVSS 6.7
CVE-2020-36225 HIGH
OpenLDAP < 2.4.57 - Denial of Service via SASL AuthzTo Double Free
CVSS 7.5
CVE-2020-36223 HIGH
macOS 10.14.0-10.14.5 - Denial of Service via Values Return Filter Control Handling
CVSS 7.5
CVE-2020-36205 MEDIUM
xcb < 2020-12-10 - Use-After-Free in base::Error
CVSS 5.5
CVE-2020-3685 HIGH
Qualcomm APQ8009 - Use-After-Free
CVSS 7.5
CVE-2020-11217 HIGH
Qualcomm PM3003A and related - Use-After-Free in Audio Driver Speaker Protection Parameter Handling
CVSS 7.8
CVE-2020-35891 HIGH
ordnung < 2020-09-03 - Use-After-Free in compact::Vec remove()
CVSS 7.5
CVE-2020-35885 CRITICAL
alpm-rs < 2020-08-20 - Use-After-Free in StrcCtx
CVSS 9.8
CVE-2020-35862 CRITICAL
bitvec < 0.17.4 - Use-After-Free in BitVec to BitBox Conversion
CVSS 9.8
CVE-2020-16590 MEDIUM
GNU Binutils 2.35 - Double Free in BFD Symbol Table Processing
CVSS 5.5
CVE-2020-15710 MEDIUM
PulseAudio - Double Free in Bluez 5 Module
CVSS 5.3
CVE-2020-17019 HIGH
Microsoft Office - Remote Code Execution via Double Free
CVSS 7.8
CVE-2020-16970 HIGH
Azure Sphere < 20.07 - Unauthenticated Remote Code Execution via Double Free
CVSS 8.1
CVE-2020-9747 HIGH
Adobe Animate < 20.5 - Double Free via Crafted .fla File
CVSS 7.8
CVE-2020-1686 HIGH
Juniper Junos OS 18.4-19.4 - Denial of Service via Malformed IPv6 Packet
CVSS 7.5
Details
Vulnerabilities 823
Exploit Likelihood High