Threats Tagged 'cwe-415'

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6.

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.

CVE-2026-61915 is a medium severity vulnerability in Cyrus IMAP before version 3.12.4 involving a double-free memory error. An authenticated calendar user can cause a crash in the Cyrus CalDAV worker by sending a PATCH request with a specific PATCH-ACTION parameter against a resource containing multiple properties of the same kind. This leads to the memory holding the selector being freed multiple times during iteration.

Adobe Acrobat contains a double free vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited. The issue affects multiple versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The vulnerability has a high severity rating with a CVSS score of 7.8.

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.