CWE-244: Heap Inspection
The product uses realloc() to resize buffers that contain sensitive information.
Also known as Improper Clearing of Heap Memory Before Release.
A kind of CWE-226 Sensitive Information in Resource Not Removed Before Reuse.
From the CWE List. © The MITRE Corporation.
Newest
- ibm concert IBM Concert Software Improper Clearing of Heap Memory 4.7 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 more Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability 8.6 High
- juev nebula-mesh nebula-mesh: Decrypted CA private key persists in heap after signing 6.9 Medium
- sqlite, siemens ruggedcom crossbow station access controller (sac) +1 more An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite... 7.5 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +1 more +3 more Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability 8.6 High
- ibm concert Multiple Vulnerabilities in IBM Concert Software. 5.9 Medium
- ibm concert Multiple Vulnerabilities in IBM Concert Software 5.9 Medium
- ibm concert Multiple Vulnerabilities in IBM Concert Software 5.9 Medium
- ibm concert BM Concert Software Improper Clearing of Heap Memory Before Release. 5.9 Medium
- ibm storage virtualize IBM Storage Virtualize Information Disclosure 7.5 High
- netsurf-browser netsurf An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating... 6.5 Medium
- ibm concert, concert software +1 more Multiple Vulnerabilities in IBM Concert Software. 6.2 Medium
- ibm concert, concert software +1 more IBM Concert Software information disclosure 5.9 Medium
- cairographics cairo An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream... 2.9 Low
- ibm mq operator, supplied mq advanced container images +1 more IBM MQ Operator information disclosure 6.2 Medium
- tozed zlt w51 TOZED ZLT W51 Service Port 7777 heap inspection 6.9 Medium
- libming A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming... 8.2 High
- libming A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of... 8.2 High
- cisco firepower threat defense software, secure firewall threat defense +1 more A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD)... 4.0 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 more A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with... 4.0 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 more A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD)... 4.0 Medium
- cisco cyber vision, firepower threat defense software, meraki mx security appliance firmware +1 more +3 more Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort... 5.8 Medium
- cisco cyber vision, firepower threat defense software, umbrella insights virtual appliance +2 more +4 more Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort... 5.8 Medium