Home / Vulnerability Database / C or C++ : Double free
C/C++

C or C++ : Double free

Classification

CWE/SANS Top 25 2021

Overview

The application is calling memory deallocation function twice on the same value. This may lead to memory leak or undefined behavior of the application.

When a program calls free() twice with the same argument, the program’s memory management data structures become corrupted and could allow a malicious user to write values in arbitrary memory spaces. This corruption can cause the program to crash or, in some circumstances, alter the execution flow.

MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Double free in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized