CWE-401
Missing Release of Memory after Effective Lifetime
Description
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (1,935)
page 91 of 97| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-35505 | Hig | 0.00 | 7.5 | 0.01 | Jun 30, 2026 | An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart. | ||
| CVE-2026-13474 | Hig | 0.00 | 7.5 | 0.01 | Jun 30, 2026 | Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler | ||
| CVE-2026-53429 | Med | 0.00 | — | 0.00 | Jun 29, 2026 | Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service through unbounded native memory exhaustion. The native rendering code permanently leaks memory… | ||
| CVE-2026-22025 | Low | 0.00 | 3.7 | 0.01 | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, when the KMC server… | ||
| CVE-2026-22024 | Med | 0.00 | 5.3 | 0.00 | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the… | ||
| CVE-2026-21674 | Low | 0.00 | 3.3 | 0.00 | Jan 6, 2026 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1. | ||
| CVE-2025-50951 | Med | 0.00 | 6.5 | 0.00 | Oct 23, 2025 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c. | ||
| CVE-2025-50949 | Med | 0.00 | 6.5 | 0.00 | Oct 23, 2025 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. | ||
| CVE-2025-60361 | Low | 0.00 | 3.3 | 0.00 | Oct 17, 2025 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open. | ||
| CVE-2025-60360 | Med | 0.00 | 5.5 | 0.00 | Oct 17, 2025 | radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. | ||
| CVE-2025-60359 | Med | 0.00 | 5.5 | 0.00 | Oct 17, 2025 | radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. | ||
| CVE-2025-60358 | Med | 0.00 | 5.5 | 0.00 | Oct 16, 2025 | radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations. | ||
| CVE-2025-54939 | Med | 0.00 | 5.3 | 0.01 | Aug 1, 2025 | LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak. | ||
| CVE-2025-53537 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2025 | LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml… | ||
| CVE-2024-8376 | Hig | 0.00 | 7.5 | 0.01 | Oct 11, 2024 | In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets. | ||
| CVE-2024-24267 | Hig | 0.00 | 7.5 | 0.02 | Feb 5, 2024 | gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function. | ||
| CVE-2024-24259 | Hig | 0.00 | 7.5 | 0.01 | Feb 5, 2024 | freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function. | ||
| CVE-2024-24258 | Hig | 0.00 | 7.5 | 0.01 | Feb 5, 2024 | freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. | ||
| CVE-2023-7192 | Med | 0.00 | 5.5 | 0.00 | Jan 2, 2024 | A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow. | ||
| CVE-2023-41102 | Hig | 0.00 | 7.5 | 0.01 | Nov 17, 2023 | An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version… |
- risk 0.00cvss 7.5epss 0.01
An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.
- risk 0.00cvss 7.5epss 0.01
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
- risk 0.00cvss —epss 0.00
Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service through unbounded native memory exhaustion. The native rendering code permanently leaks memory…
- risk 0.00cvss 3.7epss 0.01
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, when the KMC server…
- risk 0.00cvss 5.3epss 0.00
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the…
- risk 0.00cvss 3.3epss 0.00
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.
- risk 0.00cvss 6.5epss 0.00
FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.
- risk 0.00cvss 6.5epss 0.00
FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
- risk 0.00cvss 3.3epss 0.00
radare2 v5.9.8 and before contains a memory leak in the function bochs_open.
- risk 0.00cvss 5.5epss 0.00
radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.
- risk 0.00cvss 5.5epss 0.00
radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.
- risk 0.00cvss 5.5epss 0.00
radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.
- risk 0.00cvss 5.3epss 0.01
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.
- risk 0.00cvss 7.5epss 0.00
LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml…
- risk 0.00cvss 7.5epss 0.01
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.
- risk 0.00cvss 7.5epss 0.02
gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.
- risk 0.00cvss 7.5epss 0.01
freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
- risk 0.00cvss 7.5epss 0.01
freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.
- risk 0.00cvss 5.5epss 0.00
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.
- risk 0.00cvss 7.5epss 0.01
An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version…