CVE Vulnerabilities

CVE-2025-21291

Double Free

Published: Jan 14, 2025 | Modified: Jan 24, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Windows Direct Show Remote Code Execution Vulnerability

Weakness

The product calls free() twice on the same memory address.

Affected Software

NameVendorStart VersionEnd Version
Windows_10_1809Microsoft*10.0.17763.6775 (excluding)
Windows_10_21h2Microsoft*10.0.19044.5371 (excluding)
Windows_10_22h2Microsoft*10.0.19045.5371 (excluding)
Windows_11_22h2Microsoft*10.0.22621.4751 (excluding)
Windows_11_23h2Microsoft*10.0.22631.4751 (excluding)
Windows_server_2019Microsoft*10.0.17763.6775 (excluding)
Windows_server_2022Microsoft*10.0.20348.3091 (excluding)
Windows_server_2022_23h2Microsoft*10.0.25398.1369 (excluding)

Potential Mitigations

References