Vulnerabilities > CVE-2020-15710 - Double Free vulnerability in Pulseaudio Project Pulseaudio
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
HIGH Summary
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 16 | |
| OS | 1 |