Cyber Resilience

CWE · MITRE source

CWE-415Double Free

Abstraction: Variant · CVEs in our corpus: 839

The product calls free() twice on the same memory address.

Last updated: 23 August 2026 00:24 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): STIG oracle linux 8 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
  • SA-8 Security and Privacy Engineering Principles
  • SI-2 Flaw Remediation
Detect
Catch it (CSF Detect / Respond)

Harden
Shrink the surface (DISA STIG)
  • 1 hardening rule · 1 OS baseline
Validate
Prove the fix (OWASP ASVS)

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2018-0101 10.010.00.86782018-01-29
CVE-2003-0545 9.99.80.87502003-11-17
CVE-2026-33824 KEV 9.99.80.77902026-04-14
CVE-2014-0502 KEV 9.28.80.24202014-02-21
CVE-2018-4990 KEV 9.28.80.36612018-07-09
CVE-2017-5334 8.99.80.32752017-03-24
CVE-2026-23918 8.68.80.49732026-05-04
CVE-2019-11932 8.58.80.44532019-10-03
CVE-2020-9859 KEV 8.57.80.00832020-06-05
CVE-2019-8044 8.49.80.14462019-08-20
CVE-2016-3132 8.39.80.11672016-08-07
CVE-2002-0059 8.29.80.09692002-03-15
CVE-2005-1689 8.29.80.11012005-07-18
CVE-2016-5768 8.29.80.09632016-08-07
CVE-2016-5772 8.29.80.09672016-08-07
CVE-2018-12782 8.29.80.11182018-07-20
CVE-2019-5481 8.19.80.07272019-09-16
CVE-2004-0772 8.09.80.06992004-10-20
CVE-2006-5051 8.08.10.44962006-09-27
CVE-2017-11462 8.09.80.05482017-09-13
CVE-2019-7784 8.09.80.06582019-05-22
CVE-2018-20961 8.09.80.06342019-08-07
CVE-2021-0397 8.09.80.05672021-03-10
CVE-2022-20127 8.09.80.06832022-06-15
CVE-2016-6912 7.99.80.04452017-01-26