Browse CVEs

CRITICAL 9.8 CVE-2020-6072 An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels … Debian Linux No fix yet Fix from $2,3002020-03-24 HIGH 7.8 CVE-2019-5184 An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file… Pfc200 Firmware No fix yet Fix from $1,9502020-03-23 HIGH 7.8 CVE-2018-11838 Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electro… Apq8053 Firmware Patch available Fix from $1,9502020-03-05 HIGH 7.5 CVE-2019-19943 The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or dom… Quick \'n Easy Web Server after 3.3.8 Fix from $1,9502020-02-28 HIGH 7.5 CVE-2020-1829 Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R… Nip6800 Firmware Mitigation only Fix from $1,9502020-02-17 HIGH 7.8 CVE-2019-14055 Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon A… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 CRITICAL 9.8 CVE-2020-8432 In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-wha… U Boot after 2020.01 Fix from $2,3002020-01-29 MEDIUM 5.5 CVE-2020-8003 A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture al… Debian Linux after 0.8.1 Fix from $1,6002020-01-27 HIGH 8.8 CVE-2019-20393 A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to pars… Libyang Patch available Fix from $1,9502020-01-22 HIGH 8.8 CVE-2019-20394 A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications … Libyang Patch available Fix from $1,9502020-01-22 HIGH 8.8 CVE-2019-20397 A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use liby… Libyang Patch available Fix from $1,9502020-01-22 CRITICAL 9.8 CVE-2007-4773 Systrace before 1.6.0 has insufficient escape policy enforcement. Systrace 1.6.0+ Fix from $2,3002020-01-15 HIGH 7.8 CVE-2019-9468 In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with … Android 10.0+ Fix from $1,9502020-01-06 HIGH 8.8 CVE-2019-20014 An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. Libredwg 0.9.3+ Fix from $1,9502019-12-27 CRITICAL 9.8 CVE-2019-11049 In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4… PHP 5.19.0+ Fix from $2,3002019-12-23 HIGH 7.8 CVE-2019-8635 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to exe… Mac Os X 10.14.5+ Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10517 Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10536 Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first cal… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-19725 sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. Debian Linux after 12.2.0 Fix from $2,3002019-12-11 HIGH 7.8 CVE-2019-2266 Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT,… Apq8053 Firmware Patch available Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-5282 Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C… Emily Al00a Firmware Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.5 CVE-2011-1803 An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying t… Blink Mitigation only Fix from $1,6002019-11-12 HIGH 7.5 CVE-2011-2335 A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. Blink Mitigation only Fix from $1,9502019-11-12 HIGH 7.5 CVE-2019-18874 psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts… Psutil after 5.6.5 Fix from $1,9502019-11-12 CRITICAL 9.8 CVE-2019-10565 Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Co… Apq8053 Firmware Mitigation only Fix from $2,3002019-11-06 CRITICAL 9.8 CVE-2019-17545 GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. Debian Linux after 3.0.1 Fix from $2,3002019-10-14 HIGH 8.8 CVE-2019-11932EPSS 45% A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp f… Whatsapp 1.2.18 / 2.19.244+ Fix from $1,9502019-10-03 CRITICAL 9.8 CVE-2019-16880 An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method. Linea after 0.9.4 Fix from $2,3002019-09-25 CRITICAL 9.8 CVE-2019-5481EPSS 7% Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. Curl after 7.65.3 Fix from $2,3002019-09-16 HIGH 7.8 CVE-2019-2115 In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. Thi… Android Patch available Fix from $1,9502019-09-05