#double-free

1 stories this week · 6 this month · 9 in 6 months · mostly security

Stories per day · 30 days

9 stories, newest first · one card per story

Data races in connection-pooling state data and races between teardown and error-handling can cause double-frees and use-after-frees.

Shapelib shpsort utility mishandles inputs leading to double free, potentially causing denial of service or arbitrary code execution.

ZDI rates CVE-2026-92211 at 7.8; library interaction is required and no fix is listed.

Elise sent PHP a short proof of concept; no CVE, patch, or vendor confirmation is stated.

ZDI discloses a local X.Org Server XKB double-free that can escalate privileges.

A double-free in FortiOS, FortiProxy, and FortiSwitch lets a local user crash the newcli daemon.

Ubuntu warned of an Open-iSNS double-free that unauthenticated attackers could use for denial of service.

CISA AdvisoriesSep 22, 2026high

CISA warns lwIP 2.0.1–2.2.1 has a double-free that can crash devices or enable code execution.

ZDI details CVE-2026-33824, a double-free in Windows IKEv2 fragment reassembly enabling unauthenticated remote code execution as SYSTEM on Windows.

Stories tagged #double-free