CWE-415 vulnerabilities

Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Memory corruption while processing command message in WLAN Host.

Memory corruption while processing multiple simultaneous escape calls.

Memory corruption while retrieving the CBOR data from TA.

CVE-2025-4574 is a vulnerability in the crossbeam-channel Rust crate where a race condition in the internal Channel type's Drop method can cause a double-free, potentially leading to memory corruption. This flaw can result in integrity and availability impacts such as program crashes or memory corruption. The vulnerability has a CVSS v3.1 base score of 6.5 (medium severity). No official patch or mitigation is currently available that meets Red Hat's criteria for ease of use and deployment.

Windows Telephony Server Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVE-2025-21673 is a critical vulnerability in the Linux kernel's SMB client implementation. It involves a double free of the TCP_Server_Info::hostname object during server shutdown in the cifs_put_tcp_session() function. This flaw can lead to kernel crashes or potential arbitrary code execution due to memory corruption. The issue occurs when the cifsd thread reconnects to multiple DFS targets and frees the hostname prematurely. The vulnerability affects Linux kernel versions 5.14.19 and 5.15.3.

Windows Direct Show Remote Code Execution Vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.

CVE-2024-43514 is a high-severity elevation of privilege vulnerability in the Windows Resilient File System (ReFS) affecting multiple versions of Microsoft Windows 10, including Version 1507. The flaw is due to a double free condition (CWE-415) that could allow an attacker with limited privileges to escalate their rights on the system. Microsoft has issued official fixes for all affected versions.

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-41957 is a double free vulnerability in Vim versions prior to 9.1.0647. It occurs in the src/alloc.c file when closing a window, where tagstack data is freed twice if the quickfix list points to the same data. This can lead to a crash of Vim. The vulnerability requires the user to intentionally run Vim with several non-default flags, limiting its impact. The issue is fixed in Vim patch 9.1.0647.

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.