CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 moreIn version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...4.3 Medium
- google androidIn process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak....6.5 Medium
- google androidIn readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...5.5 Medium
- f5 big-ip, big-ip advanced firewall manager +1 moreIn certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied...7.5 High
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreMemory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...3.1 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...3.1 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet...3.1 Low
- imagemagickin SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak...3.3 Low
- imagemagickThere are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth...5.5 Medium
- red hat wildflyWildfly has a memory leak vulnerability5.9 Medium
- jenkins project chaos monkey plugin, netflix chaos monkey +1 moreMissing permission checks in Jenkins Chaos Monkey Plugin7.5 High
- cloudavid pparamMemory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1.7.5 High
- debian linux, linux kernel, starwindsoftware command center +3 more +5 moreA flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA memory leak vulnerability was found in Linux kernel in llcp_sock_connect7.5 High
- redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 moreUncontrolled Resource Consumption in WildFly5.3 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability8.6 High
- vmware esxi, fusion, workstation +2 more +4 moreIn VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation ...5.3 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise +13 more +15 moreMicrosoft Outlook Denial of Service Vulnerability4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.6.5 Medium
- amazon firecrackerIn Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can...7.5 High
- b&r automation runtimeAutomation Runtime TFTP Service DoS Vulnerability5.8 Medium
- cisco video surveillance 8000 series ip cameras, 8000p ip camera firmware, 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability6.5 Medium
- redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 moreWildfly-OpenSSL memory leak flaw7.5 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...7.8 High
- sized-chunks project sized-chunksUnaligned references in sized-chunks7.5 High
- sized-chunks project sized-chunksMissing release of memory in sized-chunks7.5 High
- sized-chunks project sized-chunksMissing release of memory in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- simple-slab project simple-slabOff-by-one error in simple-slab7.5 High
- cisco video surveillance 8000 series ip cameras, 8000p ip camera firmware, 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability6.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory...5.3 Medium
- huawei p30, p30 firmware +1 moreHUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than...4.3 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and...5.5 Medium
- nextcloud desktopA memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS...5.5 Medium
- huawei p30, p30 firmware +1 moreHUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of...6.5 Medium
- ibm mq applianceIBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker...5.9 Medium
- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +13 more +15 moreCODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE on the line card may crash due to memory leak.6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 High
- google llc wpantundMemory leak in wpanctl can lead to DoS5.0 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...5.5 Medium
- crossbeam-channel project crossbeam-channelIncorrect buffer size in crossbeam-channel5.5 Medium
- crossbeam-rs crossbeamUndefined Behavior in bounded Crossbeam channel8.1 High
- ntp, netapp 8300 firmware, 8700 firmware +13 more +15 morentpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...4.4 Medium
- Show moreLoading…