CVE Vulnerabilities

CVE-2024-21445

Double Free

Published: Mar 12, 2024 | Modified: Dec 27, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Windows USB Print Driver Elevation of Privilege Vulnerability

Weakness

The product calls free() twice on the same memory address.

Affected Software

NameVendorStart VersionEnd Version
Windows_10_21h2Microsoft*10.0.19044.4170 (excluding)
Windows_10_22h2Microsoft*10.0.19045.4170 (excluding)
Windows_11_21h2Microsoft*10.0.22000.2836 (excluding)
Windows_11_22h2Microsoft*10.0.22621.3296 (excluding)
Windows_11_23h2Microsoft*10.0.22631.3296 (excluding)
Windows_server_2022Microsoft*10.0.20348.2340 (excluding)
Windows_server_2022_23h2Microsoft*10.0.25398.763 (excluding)

Potential Mitigations

References