Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

CVEs (1,910)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-35894 1Insyde 1Insydeh2o Jun 17, 2026 Sep 22, 2022 N/A· v4 6.0 MEDIUM· v3 N/A· v2 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to...Show more An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.Show less
CVE-2022-38178 4Debian FedoraprojectIsc+1 more 4Active Iq Unified Manager BindDebian Linux+1 more Sep 1, 2026 Sep 21, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for l...Show more By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.Show less
CVE-2022-38177 4Debian FedoraprojectIsc+1 more 4Active Iq Unified Manager BindDebian Linux+1 more Sep 1, 2026 Sep 21, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for l...Show more By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.Show less
CVE-2022-2906 1Isc 1Bind Jun 17, 2026 Sep 21, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential...Show more An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.Show less
CVE-2022-35085 1Swftools 1Swftools Jun 17, 2026 Sep 21, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.
CVE-2022-39005 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.
CVE-2022-39004 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.
CVE-2022-38600 1Mplayerhq 1Mplayer Jun 17, 2026 Sep 15, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
CVE-2022-40439 1Axiosys 1Bento4 Jun 17, 2026 Sep 14, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
CVE-2022-31222 1Dell 25Chengming 3900 Firmware Inspiron 14 Plus 7420 FirmwareInspiron 16 Plus 7620 Firmware+22 more Jun 17, 2026 Sep 12, 2022 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order t...Show more Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash.Show less
CVE-2022-40281 1Samsung 1Tizenrt Jun 17, 2026 Sep 8, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SSL_get_peer_certificate, leading to information disclosure.
CVE-2022-22067 1Qualcomm 59Ar8035 Firmware Qca6390 FirmwareQca6391 Firmware+56 more Jun 17, 2026 Sep 2, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVE-2021-3574 2Fedoraproject Imagemagick 2Fedora Imagemagick Jun 17, 2026 Aug 26, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
CVE-2021-42523 1Colord Project 1Colord Jun 17, 2026 Aug 25, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing aft...Show more There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.Show less
CVE-2021-42522 1Gnome 1Anjuta Jun 17, 2026 Aug 25, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return...Show more There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.Show less
CVE-2021-4213 3Debian DogtagpkiRedhat 3Debian Linux Enterprise LinuxNetwork Security Services For Java Jun 17, 2026 Aug 24, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an...Show more A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.Show less
CVE-2021-3905 4Canonical FedoraprojectOpenvswitch+1 more 4Enterprise Linux Fast Datapath FedoraOpenvswitch+1 more Jun 17, 2026 Aug 23, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
CVE-2021-3764 1Linux 1Linux Kernel Jun 17, 2026 Aug 23, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from th...Show more A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability.Show less
CVE-2021-3736 1Linux 1Linux Kernel Jun 17, 2026 Aug 23, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal...Show more A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.Show less
CVE-2021-3690 1Redhat 7Fuse Integration Camel KIntegration Camel Quarkus+4 more Jun 17, 2026 Aug 23, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is a...Show more A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.Show less

Previous 1...747576...96 Next