CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows...7.5 High
- arm mbed-coapMemory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed...7.5 High
- canonical whoopsieResource exhaustion vulnerability in whoopsie5.5 Medium
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker...4.9 Medium
- cisco ios xe, ios xe software 16.1.1 +1 moreCisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability8.6 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 morego7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not...5.5 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware...3.3 Low
- kde amarokA remote user can create a specially crafted M3U file, media playlist file that when loaded by...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has...5.5 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability8.6 High
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability8.6 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual...7.5 High
- redhat libvirt, enterprise linux +1 moreAn issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0...6.5 Medium
- apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 moreMissing Release of Memory after Effective Lifetime in Apache Tika5.5 Medium
- ibm mq, mq appliance +1 moreIBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +30 more +32 moreWhen issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel memory leak in virtual-memory due to interface flaps6.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0)...7.5 High
- apple ios, ipados, macos +4 more +6 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets)...7.1 High
- torproject tor, opensuse backports sle, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...7.5 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 Low
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could...7.5 High
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...7.5 High
- redhat lvm2vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad...2.3 Low
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- opensuse wickedAn ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows...7.5 High
- opensuse wicked, leap +1 moreAn ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network...7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.7.5 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...2.4 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.8.6 High
- extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +1 moreUncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially...7.5 High
- gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory...5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory...5.5 Medium
- linux kernel, netapp 8300 firmware, 8700 firmware +11 more +13 moremwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c...5.5 Medium
- matio project matioA memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does...6.5 Medium
- saitoha libsixelA memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...7.5 High
- f5 big-ip, big-ip local traffic manager +1 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12...7.5 High
- huawei cloudengine 12800, cloudengine 12800 firmware +1 moreCloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large...7.4 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a...7.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain...7.5 High
- vmware fusion, workstation, workstation and fusion +2 moreVMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information...7.7 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreMemory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the...4.7 Medium
- Show moreLoading…