Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

CVEs (1,910)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-1564 1Cisco 2Video Surveillance 7070 Firmware Video Surveillance 7530pd Firmware Jun 17, 2026 Jun 4, 2021 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacke...Show more Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service (DoS) condition on an affected device. These vulnerabilities are due to incorrect processing of certain Cisco Discovery Protocol and LLDP packets at ingress time. An attacker could exploit these vulnerabilities by sending crafted Cisco Discovery Protocol or LLDP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, which could cause the device to crash and reload, resulting in a DoS condition. Note: Cisco Discovery Protocol and LLDP are Layer 2 protocols. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Show less
CVE-2021-1563 1Cisco 2Video Surveillance 7070 Firmware Video Surveillance 7530pd Firmware Jun 17, 2026 Jun 4, 2021 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacke...Show more Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service (DoS) condition on an affected device. These vulnerabilities are due to incorrect processing of certain Cisco Discovery Protocol and LLDP packets at ingress time. An attacker could exploit these vulnerabilities by sending crafted Cisco Discovery Protocol or LLDP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, which could cause the device to crash and reload, resulting in a DoS condition. Note: Cisco Discovery Protocol and LLDP are Layer 2 protocols. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Show less
CVE-2020-22056 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.
CVE-2020-22054 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
CVE-2020-22051 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
CVE-2020-22049 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
CVE-2020-22048 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
CVE-2020-22046 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
CVE-2021-3544 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c d...Show more Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.Show less
CVE-2020-22044 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
CVE-2021-26111 1Fortinet 1Fortiswitch Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory...Show more A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.Show less
CVE-2020-22043 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.
CVE-2020-22042 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
CVE-2020-22041 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
CVE-2020-22040 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.
CVE-2020-22039 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.
CVE-2020-22038 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.
CVE-2020-22037 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
CVE-2021-20237 1Zeromq 1Libzmq Jun 17, 2026 May 28, 2021 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive...Show more An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highest threat from this vulnerability is to system availability.Show less
CVE-2021-28652 3Debian FedoraprojectSquid Cache 3Debian Linux FedoraSquid Jun 17, 2026 May 27, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory le...Show more An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.Show less

Previous 1...808182...96 Next