Browse CVEs

HIGH 7.0 CVE-2021-22386 A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privi… Emui Mitigation only Fix from $1,9502021-08-10 CRITICAL 9.8 CVE-2020-36434 An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free. Sys Info 0.8.0+ Fix from $2,3002021-08-08 HIGH 7.8 CVE-2021-22425 A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges. Harmonyos Mitigation only Fix from $1,9502021-08-03 MEDIUM 6.4 CVE-2021-37159 hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED st… Linux Kernel after 5.13.4 Fix from $1,6002021-07-21 MEDIUM 5.5 CVE-2021-0601 In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-34333 A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in a… Jt2go 13.2.0+ Fix from $1,6002021-07-13 HIGH 7.8 CVE-2021-1888 Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdrago… Apq8017 Firmware Mitigation only Fix from $1,9502021-07-13 HIGH 8.1 CVE-2021-27033 A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Revie… Design Review Mitigation only Fix from $1,9502021-07-09 HIGH 8.8 CVE-2021-36080 GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). Libredwg after 0.12.3.4191 Fix from $1,9502021-07-01 CRITICAL 9.8 CVE-2021-36088 Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do). Fluent Bit after 1.7.4 Fix from $2,3002021-07-01 HIGH 7.8 CVE-2020-36401 mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). Mruby Patch available Fix from $1,9502021-07-01 CRITICAL 9.8 CVE-2021-34184 Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h. Miniaudio Patch available Fix from $2,3002021-06-25 HIGH 7.8 CVE-2021-0528 In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502021-06-21 HIGH 7.8 CVE-2021-0498 In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 5.5 CVE-2021-3564 A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluet… Linux Kernel No fix yet Fix from $1,6002021-06-08 HIGH 8.8 CVE-2021-30535 Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 MEDIUM 5.5 CVE-2021-32613 In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. Fedora after 5.3.0 Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-31449 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Foxit Reader after 10.1.3.37598 Fix from $1,9502021-05-07 CRITICAL 9.8 CVE-2021-1910 Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO… Apq8009 Firmware Mitigation only Fix from $2,3002021-05-07 HIGH 7.5 CVE-2021-31996 An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge(). Algorithmica after 2021-03-07 Fix from $1,9502021-05-03 HIGH 7.5 CVE-2021-22332 There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a f… Cloudengine 12800 Firmware Mitigation only Fix from $1,9502021-04-28 MEDIUM 6.5 CVE-2021-0271 A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected at… Junos Mitigation only Fix from $1,6002021-04-22 HIGH 7.8 CVE-2021-3492 Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() corre… Ubuntu Linux 18.04 / 20.04+ Fix from $1,9502021-04-17 CRITICAL 9.8 CVE-2021-31162 In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics. Rust 1.52.0+ Fix from $2,3002021-04-14 HIGH 7.8 CVE-2021-0437 In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no … Android Patch available Fix from $1,9502021-04-13 CRITICAL 9.8 CVE-2020-36318 In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.… Rust 1.49.0+ Fix from $2,3002021-04-11 CRITICAL 9.8 CVE-2021-30455 An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic. Id Map after 2021-02-26 Fix from $2,3002021-04-07 CRITICAL 9.8 CVE-2021-30456 An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon a panic of a user-provided f f… Id Map after 2021-02-26 Fix from $2,3002021-04-07 CRITICAL 9.8 CVE-2021-30457 An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a panic in a Drop impl. Id Map after 2021-02-26 Fix from $2,3002021-04-07 HIGH 7.8 CVE-2021-29627 In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters im… FreeBSD 12.2+ Fix from $1,9502021-04-07