Browse CVEs

HIGH 7.1 CVE-2019-0122 Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to p… Software Guard Extensions Sdk 2.1 / 2.2+ Fix from $1,9502019-03-14 HIGH 7.8 CVE-2019-1999 In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privileg… Debian Linux No fix yet Fix from $1,9502019-02-28 CRITICAL 9.8 CVE-2019-6978 The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is un… Debian Linux Patch available Fix from $2,3002019-01-28 MEDIUM 6.5 CVE-2019-6455 An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c. Recutils No fix yet Fix from $1,6002019-01-16 HIGH 8.8 CVE-2018-15518 QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document. Debian Linux 5.11.3+ Fix from $1,9502018-12-26 MEDIUM 6.5 CVE-2018-20450 The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafte… Libxls No fix yet Fix from $1,6002018-12-25 HIGH 8.8 CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in … Debian Linux 3.4.0+ Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-11987 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is an unlikely memory alloc failu… Android Patch available Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-9553 In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code executio… Android Patch available Fix from $1,9502018-12-06 MEDIUM 6.5 CVE-2018-16841 Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card auth… Ubuntu Linux 4.7.12 / 4.8.7+ Fix from $1,6002018-11-28 HIGH 7.8 CVE-2018-11918 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated is automatically released… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11823 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, freeing device memory in driver probe fail… Android Patch available Fix from $1,9502018-11-27 CRITICAL 9.8 CVE-2018-9356 In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no add… Android Patch available Fix from $2,3002018-11-06 HIGH 7.8 CVE-2018-9415 In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalat… Ubuntu Linux Patch available Fix from $1,9502018-11-06 CRITICAL 9.8 CVE-2018-18751 An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram… Ubuntu Linux No fix yet Fix from $2,3002018-10-29 HIGH 7.8 CVE-2018-18718 An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c becaus… Debian Linux after 3.6.2 Fix from $1,9502018-10-29 HIGH 7.8 CVE-2017-18297 Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. Sd 425 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2018-12841 Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a double free vulnerabi… Acrobat Dc after 18.011.20063 Fix from $1,9502018-10-12 MEDIUM 6.8 CVE-2018-0469 A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to rel… Ios Xe Mitigation only Fix from $1,6002018-10-05 HIGH 7.8 CVE-2018-9513 In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-4000 An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted docume… Atlantis Word Processor No fix yet Fix from $1,9502018-10-01 CRITICAL 9.8 CVE-2018-17825 An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's t… Fedora No fix yet Fix from $2,3002018-10-01 HIGH 8.8 CVE-2018-11982 In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, … Mdm9206 Firmware Mitigation only Fix from $1,9502018-09-20 HIGH 7.8 CVE-2018-11840 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN driver command … Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11276 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocation is possi… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11270 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with devm_kzalloc is aut… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11273 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as a device-… Android Patch available Fix from $1,9502018-09-18 HIGH 8.8 CVE-2018-17097 The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly… Soundtouch No fix yet Fix from $1,9502018-09-16 HIGH 7.5 CVE-2018-14638 A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connec… Enterprise Linux Aus 1.3.8.4+ Fix from $1,9502018-09-14 MEDIUM 6.6 CVE-2018-16424 A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers… Opensc after 0.18.0 Fix from $1,6002018-09-04