SYM_C_0008 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Double Free

Property Value
Language c
Severity medium
CWE CWE-415: Double Free
OWASP A03:2021 - Injection
Confidence Level Low
Impact Level High
Likelihood Level Low

Description

The code frees the same memory pointer more than once, which is known as a double free vulnerability. This happens when free() is called on a pointer that has already been freed, without resetting or reassigning it first.

Impact

Double free vulnerabilities can lead to program crashes, memory corruption, or allow attackers to execute arbitrary code. This may result in denial of service or potentially give an attacker control over your application, risking data theft or system compromise.