CWE-401
1,849 CVEs • Abstraction: Variant • Likelihood of Exploit: Medium
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
CVEs (1,849)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kerne...Show more |
2Linux Redhat2Enterprise Linux Linux KernelJun 17, 2026 Apr 11, 2019 N/A· v4 6.1 MEDIUM· v3 4.9 MEDIUM· v2 It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in para...Show more |
3Debian GraphicsmagickOpensuse3Debian Linux GraphicsmagickLeapJun 17, 2026 Apr 8, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted image file. |
3Canonical DebianImagemagick3Debian Linux ImagemagickUbuntu LinuxJun 17, 2026 Mar 30, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. |
1F5 14Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+11 moreJun 17, 2026 Mar 28, 2019 N/A· v4 5.9 MEDIUM· v3 7.1 HIGH· v2 On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when processing authorized SNMP requests. |
1F5 13Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+10 moreJun 17, 2026 Mar 28, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory. |
1Article2pdf Project 1Article2pdf Jun 17, 2026 Mar 27, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF fil...Show more |
In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a...Show more |
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kerne...Show more |
4Canonical DebianImagemagick+1 more4Debian Linux ImagemagickLeap+1 moreJun 17, 2026 Mar 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. |
2Siemens Uvnc4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 moreJun 17, 2026 Mar 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can b...Show more |
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wa...Show more |
4Canonical DebianLinux+1 more4Debian Linux LeapLinux Kernel+1 moreJun 17, 2026 Feb 21, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures. |
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed. |
4Canonical DebianImagemagick+1 more4Debian Linux ImagemagickLeap+1 moreJun 17, 2026 Feb 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. |
5Canonical DebianGraphicsmagick+2 more5Debian Linux GraphicsmagickImagemagick+2 moreJun 17, 2026 Feb 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. |
4Canonical DebianImagemagick+1 more4Debian Linux ImagemagickLeap+1 moreJun 17, 2026 Feb 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. |
4Canonical DebianImagemagick+1 more4Debian Linux ImagemagickLeap+1 moreJun 17, 2026 Feb 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. |
2Debian Redhat7Debian Linux Enterprise Linux DesktopEnterprise Linux Server+4 moreJun 17, 2026 Jan 28, 2019 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to...Show more |
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv. |