1008
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 986 SFP Secondary Cluster: Missing Lock 888 2411
MemberOf 1401 Comprehensive Categorization: Concurrency 1400 2526
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Missing Lock Check
Software Fault Patterns SFP19 Missing Lock
CWE-415: Double Free
Weakness ID : 415
Structure : Simple
Abstraction : Variant
Description
The product calls free() twice on the same memory address, potentially leading to modification of
unexpected memory locations.
Extended Description
When a program calls free() twice with the same argument, the program's memory management
data structures become corrupted. This corruption can cause the program to crash or, in some
circumstances, cause two later calls to malloc() to return the same pointer. If malloc() returns the
same value twice and the program later gives the attacker control over the data that is written into
this doubly-allocated memory, the program becomes vulnerable to a buffer overflow attack.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 666 Operation on Resource in Wrong Phase of Lifetime 1462
ChildOf 1341 Multiple Releases of Same Resource or Handle 2246
ChildOf 825 Expired Pointer Dereference 1732
PeerOf 123 Write-what-where Condition 323
PeerOf 416 Use After Free 1012
CanFollow 364 Signal Handler Race Condition 899
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 672 Operation on a Resource after Expiration or Release 1479
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ChildOf 672 Operation on a Resource after Expiration or Release 1479
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
CWE Version 4.14
CWE-415: Double Free
CWE-415: Double Free