CWE-401: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Also known as Missing Release of Memory after Effective Lifetime.
A kind of CWE-772 Missing Release of Resource after Effective Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- wind river inc vxworks 7VxWorks Memory Allocation5.5 Medium
- wiresharkMissing Release of Memory after Effective Lifetime in Wireshark5.5 Medium
- linux, linux kernel +1 moresmb/server: fix tree connection leak in smb2_tree_connect()5.5 Medium
- linux, linux kernel +1 morestaging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths5.5 Medium
- linux, linux kernel +1 morenvmet-rdma: fix queue leak when connect backlog is exceeded5.5 Medium
- linux, linux kernel +1 moreaccel/amdxdna: put the chained BO when its mapping fails5.5 Medium
- linux, linux kernel +1 morentfs: fix kmap_local leak in write_mft_record_nolock() error paths5.5 Medium
- linux, linux kernel +1 morenet: stmmac: fix dma mapping leak in stmmac_tso_xmit()5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()5.5 Medium
- linux, linux kernel +1 morenetfs: Fix subreq ref leak5.5 Medium
- linux, linux kernel +1 moreASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()5.5 Medium
- linux, linux kernel +1 morebtrfs: fix the possible bioc_list memory leak during error5.5 Medium
mxmlDebianMini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML...6.5 Mediumlibnet-idn-encode-perlDebian,perl-Net-IDN-EncodeopenSUSE +1 moreNet::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode9.1 Critical- vllmvLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision8.7 High
- oisf suricataSuricata app-layer: passed flows can retain transactions, causing resource exhaustion7.5 High
- oisf suricataSuricata smb: some SMB flows can cause resource exhaustion5.9 Medium
- vllmvLLM through 0.29.0 Memory Exhaustion via Rejected Requests8.7 High
- apache software foundation karafApache Karaf: Improper release of ClassLoader references via static ThreadLocal caching7.5 High
- @libp2p floodsub, libp2p js-libp2p +1 morelibp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS7.5 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 moreCisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability7.4 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +4 more +6 moreKeycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state7.5 High
- modelcontextprotocol rust-sdkRMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service7.5 High
- isc bind 9SVCB AliasMode additional-data error leaks qpcache references7.5 High
- http4sHttp4s: DigestAuth nonce map grows unbounded7.5 High
- red hat enterprise linux 8Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge3.7 Low
- dvidelabs flatccDvidelabs flatcc semantics.c fb_clear_parser memory leak6.9 Medium
- zephyrproject zephyrHeap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service5.3 Medium
- compressioncompression vulnerable to Denial of Service via memory leak on premature response close7.5 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows DHCP Client Denial of Service Vulnerability6.5 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Active Directory Domain Services Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows TCP/IP Denial of Service Vulnerability7.5 High
libprotocol-http2-perlDebian,perl-protocol-http2Alpine +1 moreProtocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table7.5 High- strongswanstrongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in...3.7 Low
- strongswanlibcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective...3.7 Low
- strongswanstrongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that...3.7 Low
- the tcpdump group libpcaprpcapd memory leak in libpcap before 1.10.74.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Debug Server4.3 Medium
- softing smartlink hw-pnMemory leak in scan method6.3 Medium
- cisco session initiation protocol (sip) softwareCisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability7.5 High
- zephyrproject zephyrIPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service6.5 Medium
- zephyrproject zephyrEthernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion6.5 Medium
- openndsMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive...5.3 Medium
- envoyproxy envoyEnvoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Memory Leak via SETUP Frame in RSocketMessageHandler7.5 High
- spring micrometerMicrometer instrumentation of Apache HttpAsyncClient DoS vulnerability5.9 Medium
- zephyrproject zephyrInfineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion5.3 Medium
- Show moreLoading…