CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moremedia: staging/intel-ipu3: Fix memory leak in imu_fmt5.5 Medium
- linux, linux kernel +1 moremedia: dvbdev: Fix memory leak in dvb_media_device_free()5.5 Medium
- linux, linux kernel +1 moreNFC: st21nfca: Fix memory leak in device probe and remove5.5 Medium
- athemeAtheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c.7.5 High
- liblas, fedoraproject fedora +1 morelibLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.7.5 High
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.5.5 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.5.3 Medium
- libminglibming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.4.3 Medium
- nodejs undiciBackpressure request ignored in fetch() in Undici6.5 Medium
- silabs gecko software development kit, silabs.com gsdk +1 moreSilicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients6.5 Medium
- freebsdMemory disclosure by stale virtual memory mapping4.0 Medium
- linux kernelA memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel...5.5 Medium
- enlightenment imlib2imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().8.8 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +99 more +101 moreImproper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor7.5 High
- gpacgpac v2.2.1 was discovered to contain a memory leak via the gfio_blob variable in the...7.5 High
- gpacgpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the...7.5 High
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...7.5 High
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...7.5 High
- openfgaOpenFGA DoS5.3 Medium
- openvswitchopenvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in...7.5 High
- tortall yasmA memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of...5.5 Medium
- amd athlon 3000g firmware, instinct mi100 firmware, instinct mi210 firmware +129 more +131 moreGPU kernel implementations susceptible to memory leak6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC3E memory leak with PTP configuration6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: refcount leak in ctnetlink_create_conntrack()5.5 Medium
- johnsoncontrols iosmart gen 1 firmware, sensormatic electronics, a subsidiary of johnson controls, inc. iosmart gen1 +1 moreKantech Gen1 ioSmart card reader7.5 High
- siemens simatic cp 1242-7 v2 (incl. siplus variants), simatic cp 1243-1 (incl. siplus variants), simatic cp 1243-1 dnp3 (incl. siplus variants) +21 more +23 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions...8.7 High
- gpacgpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd...5.5 Medium
- gpacGPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble...5.3 Medium
- cloudflare boring, tokio-boring +1 moreResource exhaustion via memory leak in tokio-boring5.3 Medium
- apryse itextApryse iText Reference Table PdfDocument.java memory leak4.3 Medium
- gpacGPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes...7.1 High
- gpacGPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string...5.5 Medium
- openndsAn issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple...7.5 High
- gpacMP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the...5.5 Medium
- hashicorp vault, vault enterprise +1 moreVault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption5.9 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low...6.5 Medium
- fedora, red hat 3scale api management platform 2, rmagick +2 moreDraw while calling getdrawinfo()5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak6.5 Medium
- justdan96 tsmuxerA memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- nettyNetty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)7.5 High
- nettyNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state6.5 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 moreNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Medium
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 High
- the-guild graphql mesh, ardatan graphql-mesh +1 moreCache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation5.1 Medium
- Show moreLoading…