GNU libcdio 'get_cdtext_generic()' function double release vulnerability

GNU libcdio is a CD-ROM input and control library that contains a library of functions for accessing CD-ROMs and CD images. A security vulnerability exists in the 'getcdtextgeneric' function in the lib/driver/cdiogeneric.c file in GNU libcdio versions prior to 2.0.0. A local attacker can exploit...

Linux kernel denial of service vulnerability (CNVD-2018-06306)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the blkcginitqueue function in block/blk-cgroup.c in the Linux kernel pri...

Linux kernel double release vulnerability (CNVD-2018-03942)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A double release vulnerability exists in versions of Linux kernel prior to 4.7. No details of the vulnerability are provided at this time...

Huawei Mobile GPU Driver Memory Double Release Vulnerability

Huawei Mate 9 and Mate 9 Pro are both smartphone products from the Chinese company Huawei.GPU driver is one of the graphics drivers used in... A double release vulnerability exists in the GPU driver in Huawei Mate 9 versions prior to MHA-AL00B 8.0.0.334C00 and Mate 9 Pro versions prior to LON-AL0...

ldns double release vulnerability

ldns is an open source library that provides DNS resolution , you can implement a variety of DNS server or client functions . A double release vulnerability exists in parse.c in ldns 1.7.0. An attacker can exploit this vulnerability to cause a denial of service...

ldns double release vulnerability (CNVD-2017-37283)

ldns is an open source library that provides DNS resolution , you can implement a variety of DNS server or client functions . A double release vulnerability exists in str2host.c in ldns 1.7.0. An attacker can exploit this vulnerability to cause a denial of service...

Sound eXchange Double Release Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A double release vulnerability exists in the 'lsxaiffstartread' function of the aiff.c file in versions of SoX prior to 14.4.2. No details of the...

Ffmpeg Double Release Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A double release vulnerability exists in FFmpeg 3.3.4 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted AVI file...

Unicode (ICU) for C/C++ i18n/zonemeta.cpp File Double Release Vulnerability

Unicode ICU for C/C++ is a library of C/C++ functions that provide Unicode and globalization support for software applications. A double release vulnerability exists in the i18n/zonemeta.cpp file in Unicode ICU for C/C++ 59.1 and earlier. A remote attacker can exploit the vulnerability to execute...

libpgf Double Release Vulnerability

libpgf is an image file format that can be used for lossy/lossless compression. A double release vulnerability exists in the Decoder.cpp file in versions of libpgf prior to 6.15.32. No information about this vulnerability is available at this time...

Xen Double Release Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in t...

libgd2 'gdImagePngPtr' function double release vulnerability

libgd2 also known as GD Graphics Library or libgd is an American software developer Thomas Boutell developed an open source library for dynamic image creation, which supports the creation of charts, graphs and thumbnails and so on. A double release vulnerability exists in the 'gdImagePngPtr'...

libzip '_zip_dirent_read' function double release vulnerability

libzip is a C library for reading, creating and modifying zip archives developed by software developers Dieter Baron and Thomas Klausner. A double release vulnerability exists in the 'zipdirentread' function of the zipdirent.c file in libzip. A local attacker could exploit the vulnerability to...

Creolabs Gravity Double Release Vulnerability

Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A double release vulnerability exists in gravityvalue in Creolabs Gravi...

Google Android Qualcomm TrustZone Double Release Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm TrustZone is a system-wide security technology. A double release vulnerability exists in Qualcomm TrustZone in versions of Android prior to 7.1.1. Allowing an...

Dropbear Double Release Vulnerability

Dropbear is an open source small SSH server and client developed by software developer Matt Johnston , it can run on a variety of platforms based on POSIX Portable Operating System Interface . A double release vulnerability exists in the server in versions of Dropbear prior to 2017.75. A remote...

Apple macOS Sierra SecurityFoundation Double Release Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.SecurityFoundation is an application authentication and secure file storage component of it. A double release vulnerability exists in the SecurityFoundation component in Apple macOS Sierra versions prior to...

Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn

Apple macOS Kernel 10.12.3 16D32 - Use-After-Free Due to Double-Release in posixspawn / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1104 exechandleportactions is responsible for handling the xnu port actions extension to posixspawn. It supports 4 different types of port...

macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1104 exechandleportactions is responsible for handling the xnu port actions extension to posixspawn. It supports 4 different types of port PSPASPECIAL, PSPAEXCEPTION,...

MacOS kernel uaf due to double-release in posix_spawn（CVE-2017-2472）

exechandleportactions is responsible for handling the map port actions extension to posixspawn. It supports 4 different types of port PSPASPECIAL, PSPAEXCEPTION, PSPAAUSESSION and PSPAIMPWATCHPORTS For the special, exception and audit the ports it tries to update the new task to reflect the port...