CVE Intelligence
Analysis AI-assisted

CVE-2020-37239: Gegl libbabl 0.1.62 Double Free Detection Flaw (CWE-415)

libbabl 0.1.62, a library from the GEGL project, has a broken double free detection mechanism tracked as CWE-415, which can let an attacker bypass memory safety checks. VulnCheck publishes a CVSS 3.1 base score of 9.8 (Critical) and a CVSS 4.0 score of 9.3 for this CVE. The record lists no fixed version and does not list the CVE in CISA KEV.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes libbabl 0.1.62, a library associated with the GEGL project, whose double free detection can be bypassed. According to the description, allocator metadata overwrites a signature field in freed memory, so a second release of the same pointer may not be caught by the library's own checks. The weakness is classified as CWE-415 (Double Free).

Impact

  • The description states that the flaw may enable potential memory corruption and code execution.
  • VulnCheck publishes a CVSS 3.1 base score of 9.8 (Critical) and a CVSS 4.0 score of 9.3.
  • The SSVC fields in the record list exploitation as poc, automatable as yes and technical impact as total.

Affected products and versions

  • The record lists Gegl Libbabl, version 0.1.62, as affected.
  • No other affected versions are listed in the sources consulted.

Exploitation status

  • The CISA KEV catalogue does not list this CVE according to the record.
  • No confirmed exploitation in the wild appears in the sources consulted.
  • The record includes a reference tagged as an exploit and an SSVC exploitation value of poc, which indicate that public proof-of-concept material may exist. This is not evidence of confirmed attacks.

Remediation and mitigation

  • The record contains no fixed version or patch. Check the upstream GEGL and babl project resources for updates before changing deployments.
  • Inventory systems that include or depend on libbabl, with particular attention to version 0.1.62.
  • Until a fix is confirmed, limit exposure of applications using the library to untrusted input and apply least privilege to the affected processes.
  • Where the library is not required, consider removing it from the environment.

Detection guidance

  • Monitor crashes, heap corruption reports and abnormal terminations in processes that load libbabl.
  • Use memory-safety analysis tools in test builds to surface double free conditions.
  • Review application logs for unexpected behavior when processing external data.

Limitations of the available information

  • The record does not describe the affected code path or the exact conditions required for exploitation in detail.
  • No fixed version, project advisory or affected range beyond 0.1.62 is present in the record.
  • The record's source status is Deferred, so the assessment may change as more information becomes available.

Frequently asked questions

What is the weakness in CVE-2020-37239?

The record describes a broken double free detection in libbabl 0.1.62, classified as CWE-415. Allocator metadata overwrites a signature field in freed memory, so repeated frees of the same pointer may not be detected.

Is this CVE known to be actively exploited?

No. The record does not list the CVE in CISA KEV, and no confirmed exploitation in the wild appears in the sources consulted. The record does include an exploit-tagged reference and an SSVC exploitation value of poc.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.