← Back
CWE-401

1,849 CVEs • Abstraction: Variant • Likelihood of Exploit: Medium

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

JSON object

Loading...

CVEs (1,849)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gpac
1Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
2Linux
Opensuse
2Leap
Linux Kernel
Jun 17, 2026
Sep 4, 2019
N/A· v4
4.7 MEDIUM· v3
4.7 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.
1F5
13Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+10 more
Jun 17, 2026
Sep 4, 2019
N/A· v4
5.3 MEDIUM· v3
4.3 MEDIUM· v2
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attack...Show more
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system.Show less
1Linux
1Linux Kernel
Jun 17, 2026
Sep 4, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.
3Debian
LinuxRedhat
3Debian Linux
Enterprise LinuxLinux Kernel
Jun 17, 2026
Aug 29, 2019
N/A· v4
4.7 MEDIUM· v3
4.7 MEDIUM· v2
In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
1Riot Os
1Riot
Jun 17, 2026
Aug 17, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. T...Show more
RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN.Show less
5Belden
NetappSiemens+2 more
12E Series Santricity Os Controller
Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 more
Jun 17, 2026
Aug 9, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Jul 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
3Canonical
ImagemagickOpensuse
3Imagemagick
LeapUbuntu Linux
Jun 17, 2026
Jul 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Jul 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Jul 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
2Imagemagick
Opensuse
2Imagemagick
Leap
Jun 17, 2026
Jul 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
Jun 17, 2026
Jul 1, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
2Imagemagick
Opensuse
2Imagemagick
Leap
Jun 17, 2026
Jul 1, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
2Imagemagick
Opensuse
2Imagemagick
Leap
Jun 17, 2026
Jul 1, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Jun 26, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Jun 26, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
1Linux
1Linux Kernel
Jun 17, 2026
May 28, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not b...Show more
An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issueShow less
1Cisco
2Adaptive Security Appliance Software
Firepower Threat Defense
Jun 17, 2026
May 3, 2019
N/A· v4
8.6 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could a...Show more
A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.Show less
1Libarchive
1Libarchive
Jun 17, 2026
Apr 23, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOT...Show more
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.Show less