CVE-2022-32962

MEDIUM Year: 2022
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-415
View all →

Vulnerability Description

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

Related Vulnerabilities

CVE-2018-0469

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-m...

CWE-4152018

CVE-2019-20792

MEDIUM
CVSS:6.8(Medium)

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

CWE-4152019

CVE-2023-21629

MEDIUM
CVSS:6.8(Medium)

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CWE-4152023

CVE-2020-11231

MEDIUM
CVSS:6.7(Medium)

Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, S...

CWE-4152020

CVE-2020-25637

MEDIUM
CVSS:6.7(Medium)

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects ...

CWE-4152020

CVE-2021-39725

MEDIUM
CVSS:6.7(Medium)

In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges...

CWE-4152021