CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in...6.5 Medium
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc...6.5 Medium
- microsoft zeromq, zeromq libzmq +1 moreAn uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in...7.5 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreModerate: squid:4 security, bug fix, and enhancement update4.9 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreModerate: squid:4 security, bug fix, and enhancement update7.5 High
- ffmpeg, debian linux +1 moreDenial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.7.5 High
- trustedfirmware trusted firmware-mIn Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part...7.5 High
- gnu libredwgAn issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in...6.5 Medium
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- stormshield network securityStormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics7.5 High
- gpacMemory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- canonical ubuntu linux, ubuntu linux kernel +1 moreUbuntu linux kernel shiftfs file system double free vulnerability8.8 High
- huawei ips6000e firmware, ips module firmware, ngfw module firmware +9 more +11 moreThere is a memory leak vulnerability in some Huawei products. An authenticated remote attacker...6.5 Medium
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +342 more +344 moreDenial of service while processing RTCP packets containing multiple SDES reports due to memory...7.5 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a...5.5 Medium
- friendica** DISPUTED ** Module/Settings/UserExport.php in Friendica through 2021.01 allows settings...7.5 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists....6.2 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a...5.5 Medium
- gnu tar, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar3.3 Low
- linux kernel, oracle tekelec platform distribution +1 moreA flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in...5.5 Medium
- microsoft zeromq, zeromq libzmq +1 moreAn uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in...6.5 Medium
- zte zxr10 8900e firmwareA ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory...4.4 Medium
- cisco nx-os software, nx-os, unified computing system +2 moreCisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability5.8 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreMemory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...3.7 Low
- nfstreamNFStream Local Denial of Service (DoS)5.5 Medium
- privoxyA flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI...7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Enf Broker Denial of Service Vulnerability8.6 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler...7.5 High
- privoxyA memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler...7.5 High
- zte zxr10 9904-s firmware, zxr10 9904 firmware, zxr10 9908-s firmware +2 more +4 moreSome ZTE products have a DoS vulnerability. Due to the improper handling of memory release in...7.5 High
- cisco staros, asr 5000 series software, virtualized packet core-single instance +2 moreCisco StarOS IPv4 Denial of Service Vulnerability5.8 Medium
- mutt, debian linux, fedoraproject fedora +2 morerfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain7.5 High
- k7computing antivrius, enterprise security, total security +1 more +3 moreK7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered...7.5 High
- huawei cloudengine 12800, cloudengine 5800, cloudengine 6800 +5 more +7 moreThere is a memory leak vulnerability in some versions of Huawei CloudEngine product. An...7.5 High
- opensmtpd, fedoraproject fedora +1 moresmtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...7.5 High
- Show moreLoading…