Threats Tagged 'cwe-415'

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

A double free vulnerability exists in libarchive's RAR5 reader that can cause applications using the library to crash, resulting in denial of service. This occurs when the filtered_buf pointer is freed twice during processing of specially crafted RAR5 archives. The vulnerability affects libarchive versions starting from 3.4.0, which introduced RAR5 support. Red Hat has assigned a CVSS score of 7.5 (high severity) based on typical deployment scenarios where libarchive is embedded in automated, network-facing services. A security update addressing this issue is available in libarchive version 3.8.8-2.hum1 for Red Hat Hardened Images. No known exploits are reported in the wild.

YAML::Syck versions prior to 1.47 for Perl contain a use-after-free and double-free vulnerability triggered by redefinition or removal of anchor nodes during YAML parsing. This flaw causes the interpreter to crash, resulting in a denial of service when processing untrusted documents that redefine anchors mid-parse.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.