Browse CVEs

HIGH 7.8 CVE-2022-2327 io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when… Linux Kernel Patch available Fix from $1,9502022-07-22 MEDIUM 6.8 CVE-2022-32962 HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability… Hicos Natural Person Credential Component Client Mitigation only Fix from $1,6002022-07-20 MEDIUM 5.9 CVE-2022-31117 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while rea… Ultrajson 5.4.0+ Fix from $1,6002022-07-05 HIGH 7.5 CVE-2021-41688 DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending… Dcmtk after 3.6.6 Fix from $1,9502022-06-28 MEDIUM 5.5 CVE-2022-34494 rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Linux Kernel 5.18.4+ Fix from $1,6002022-06-26 MEDIUM 5.5 CVE-2022-34495 rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Linux Kernel 5.18.4+ Fix from $1,6002022-06-26 HIGH 7.8 CVE-2022-33033 LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.5 CVE-2022-31291 An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. Debian Linux Patch available Fix from $1,9502022-06-16 HIGH 7.8 CVE-2021-39806 In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502022-06-15 CRITICAL 9.8 CVE-2022-20127EPSS 7% In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no add… Android Mitigation only Fix from $2,3002022-06-15 CRITICAL 9.8 CVE-2022-22086 Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon … Apq8009w Firmware Mitigation only Fix from $2,3002022-06-14 HIGH 7.8 CVE-2022-22103 Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto Sa8540p Firmware Mitigation only Fix from $1,9502022-06-14 MEDIUM 6.7 CVE-2022-21758 In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002022-06-06 HIGH 7.8 CVE-2021-42613 A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact vi… Fedora No fix yet Fix from $1,9502022-05-24 HIGH 7.8 CVE-2022-29032 A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visual… Jt2go 13.3.0.3 / 14.0.0.1+ Fix from $1,9502022-05-20 CRITICAL 9.8 CVE-2022-28738 A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untruste… Ruby 3.0.4 / 3.1.2+ Fix from $2,3002022-05-09 HIGH 7.5 CVE-2020-14123 There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, … Miui Mitigation only Fix from $1,9502022-04-22 MEDIUM 5.3 CVE-2021-42778 A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. Fedora 0.22.0+ Fix from $1,6002022-04-18 HIGH 7.8 CVE-2022-29156 drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release. Linux Kernel 5.10.103 / 5.15.26+ Fix from $1,9502022-04-13 HIGH 7.8 CVE-2022-27416 Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. Tcpreplay Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2022-25796 A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installa… Navisworks 2022.2+ Fix from $1,9502022-04-11 MEDIUM 5.5 CVE-2022-28388 usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. Linux Kernel after 5.17.1 Fix from $1,6002022-04-03 MEDIUM 5.5 CVE-2022-28389 mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. Linux Kernel after 5.17.1 Fix from $1,6002022-04-03 HIGH 7.8 CVE-2022-28390 ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. Linux Kernel after 5.17.1 Fix from $1,9502022-04-03 HIGH 7.8 CVE-2021-42533 Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary… Bridge after 11.1.1 Fix from $1,9502022-03-16 MEDIUM 6.7 CVE-2021-39725 In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escal… Android Mitigation only Fix from $1,6002022-03-16 CRITICAL 9.8 CVE-2021-23158 A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an … Htmldoc Patch available Fix from $2,3002022-03-16 MEDIUM 6.5 CVE-2021-46700 In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free. Libsixel No fix yet Fix from $1,6002022-02-19 HIGH 7.8 CVE-2021-46621 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User inter… Microstation 10.16.02+ Fix from $1,9502022-02-18 HIGH 7.8 CVE-2021-46625 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is requir… Microstation 10.16.02+ Fix from $1,9502022-02-18