CVE Vulnerabilities

CVE-2024-38247

Double Free

Published: Sep 10, 2024 | Modified: Sep 17, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Windows Graphics Component Elevation of Privilege Vulnerability

Weakness

The product calls free() twice on the same memory address.

Affected Software

NameVendorStart VersionEnd Version
Windows_10_1507Microsoft*10.0.10240.20766 (excluding)
Windows_10_1607Microsoft*10.0.14393.7336 (excluding)
Windows_10_1809Microsoft*10.0.17763.6293 (excluding)
Windows_10_21h2Microsoft*10.0.19044.4894 (excluding)
Windows_10_22h2Microsoft*10.0.19045.4894 (excluding)
Windows_11_21h2Microsoft*10.0.22000.3197 (excluding)
Windows_11_22h2Microsoft*10.0.22621.4169 (excluding)
Windows_11_23h2Microsoft*10.0.22621.4169 (excluding)
Windows_11_23h2Microsoft*10.0.22631.4169 (excluding)
Windows_11_24h2Microsoft*10.0.26100.1742 (excluding)
Windows_server_2008Microsoftr2 (including)r2 (including)
Windows_server_2012Microsoft- (including)- (including)
Windows_server_2012Microsoftr2 (including)r2 (including)
Windows_server_2016Microsoft*10.0.14393.7336 (excluding)
Windows_server_2019Microsoft*10.0.17763.6293 (excluding)
Windows_server_2022Microsoft*10.0.20348.2700 (excluding)
Windows_server_2022_23h2Microsoft*10.0.25398.1128 (excluding)

Potential Mitigations

References