#cwe-415

共收录 139 条相关情报。

← 返回所有主题
漏洞预警2026-08-11 发布INFO

The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the bt_hci_driver_api buffer-ownership contract. That contra...

CVE-2026-11894

The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetooth/hci/hci_bflb.c, violates the bt_hci_driver_api.send() ...

CVE-2026-11893

The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetoo

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...

CVE-2026-20338

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due ...

CVE-2026-20338

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布HIGH

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() ...

CVE-2026-43622

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1bat

来源摘录 · NVD

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Double Free via llama-android.cpp

CVE-2026-43622

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1bat

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-29 发布INFO

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534...

CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to...

CVE-2026-17573

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized c

历史摘要 · 未重新核验 · NVD

安全公告2026-07-25 发布INFO

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...

CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-24 发布INFO

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the...

CVE-2026-66032

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

libssh2 Double-Free Heap Corruption via sftp_open()

CVE-2026-66032

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-22 发布INFO

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corr...

CVE-2026-64832

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the s...

CVE-2026-64621

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_appl

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

FreeRDP before 3.28.0 Double-Free via selectedmonitors

CVE-2026-64621

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_appl

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory uio_pci_sva allocates struct uio_pci_sva...

CVE-2026-63907

In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_k

来源摘录 · NVD

安全公告2026-07-17 发布INFO

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor...

CVE-2026-13713

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an ...

CVE-2026-13713

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack

CVE-2026-13713

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55132

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-50685

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD