← Back
CWE-401

1,849 CVEs • Abstraction: Variant • Likelihood of Exploit: Medium

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

JSON object

Loading...

CVEs (1,849)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Iobit
1Smart Defrag
Jun 17, 2026
Apr 11, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kerne...Show more
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.Show less
2Linux
Redhat
2Enterprise Linux
Linux Kernel
Jun 17, 2026
Apr 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.9 MEDIUM· v2
It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in para...Show more
It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in parallel executed on ioatdma-enabled hardware with net_dma enabled can leak the memory, crash the host leading to a denial-of-service or cause a random memory corruption.Show less
3Debian
GraphicsmagickOpensuse
3Debian Linux
GraphicsmagickLeap
Jun 17, 2026
Apr 8, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted image file.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
Jun 17, 2026
Mar 30, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file.
1F5
14Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+11 more
Jun 17, 2026
Mar 28, 2019
N/A· v4
5.9 MEDIUM· v3
7.1 HIGH· v2
On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when processing authorized SNMP requests.
1F5
13Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+10 more
Jun 17, 2026
Mar 28, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory.
1Article2pdf Project
1Article2pdf
Jun 17, 2026
Mar 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF fil...Show more
A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF file on disk which will never be deleted by the plug-in.Show less
1Linux
1Linux Kernel
Jun 17, 2026
Mar 21, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a...Show more
In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service.Show less
1Iobit
1Smart Defrag
Jun 17, 2026
Mar 21, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kerne...Show more
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.Show less
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Mar 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
2Siemens
Uvnc
4Sinumerik Access Mymachine/p2p
Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can b...Show more
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.Show less
1Eclipse
1Wakaama
Jun 17, 2026
Feb 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wa...Show more
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.Show less
4Canonical
DebianLinux+1 more
4Debian Linux
LeapLinux Kernel+1 more
Jun 17, 2026
Feb 21, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
1Live555
1Streaming Media
Jun 17, 2026
Feb 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
5Canonical
DebianGraphicsmagick+2 more
5Debian Linux
GraphicsmagickImagemagick+2 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
2Debian
Redhat
7Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+4 more
Jun 17, 2026
Jan 28, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to...Show more
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.Show less
1Opensc Project
1Opensc
Jun 17, 2026
Jan 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.