CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- wazuh Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder 7.1 High
- apache software foundation activemq broker, activemq +1 more Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM 6.5 Medium
- zephyrproject zephyr Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service 6.5 Medium
- mongodb c driver MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) 8.7 High
- d3tn gmbh µd3tn Missing Release of Memory after Effective Lifetime in µD3TN 7.5 High
- quickjs-ng QuickJS-NG before 0.16.0 Memory Leak via Atomics.store 6.9 Medium
- graphql-python graphql-core GraphQL-core: Denial of service via memory leak in aborted validations 7.5 High
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option 4.8 Medium
- imagemagick ImageMagick before 7.1.2-33 Memory Leak in magick compare 2.0 Low
- imagemagick ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading 4.8 Medium
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option 4.8 Medium
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile 6.9 Medium
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit 6.9 Medium
- imagemagick ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path 6.9 Medium
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder 6.3 Medium
- imagemagick ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder 2.3 Low
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder 6.3 Medium
- msgpack msgpack-python MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure 7.5 High
- cisco open source snort3, secure firewall threat defense (ftd) software +1 more Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability 5.8 Medium
- zephyrproject zephyr Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of service 5.7 Medium
-
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 more Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag 9.1 Critical -
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 more Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify 8.1 High -
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 more Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv 7.5 High -
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 more Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv 7.5 High -
libtext-csv-xs-perlDebian,perl-Text-CSV_XSAzure Linux +1 more Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline 6.5 Medium - juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used 6.9 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present 7.1 High
- juniper networks junos os Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic 8.7 High
- f5 nginx javascript NGINX ngx_http_js_module vulnerability 6.9 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +7 more +9 more Windows DHCP Client Denial of Service Vulnerability 7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 more Windows DNS Denial of Service Vulnerability 7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 more Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability 7.5 High
- imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation 6.3 Medium
- imagemagick ImageMagick before 7.1.2-32 Memory Leak via -process Option 4.8 Medium
- imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder 6.3 Medium
- imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder 6.9 Medium
- imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder 6.3 Medium
- imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder 6.3 Medium
- zephyrproject zephyr Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure 6.5 Medium
- zephyrproject zephyr Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update 6.5 Medium
- zephyrproject zephyr Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedures 6.5 Medium
- quarkiverse quarkus-langchain4j Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket 6.9 Medium
- aio-libs multidict Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction 5.3 Medium
- apache software foundation thrift Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back 6.3 Medium
- apache software foundation thrift Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path 8.7 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 more NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an... 5.5 Medium
- eclipse foundation threadx netx duo A malformed Session header permanently orphans one packet-pool block per RTSP request 8.7 High
- eclipse foundation netx duo The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed... 8.2 High
- wind river systems inc vxworks 7 VxWorks 7 Memory allocation 5.5 Medium
- Show olderLoading…