← Back
CWE-401

1,910 CVEs • Abstraction: Variant • Likelihood of Exploit: Medium

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

JSON object

Loading...

CVEs (1,910)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Fedoraproject
LinuxRedhat
3Enterprise Linux
FedoraLinux Kernel
Jun 17, 2026
Nov 7, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_para...Show more
A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.Show less
2Canonical
Linux
2Linux Kernel
Ubuntu Linux
Jun 17, 2026
Nov 7, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by t...Show more
A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka CID-a0ecd6fdbf5d.Show less
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Nov 7, 2019
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
4Canonical
FedoraprojectLinux+1 more
4Fedora
LeapLinux Kernel+1 more
Jun 17, 2026
Nov 7, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
1Linux
1Linux Kernel
Jun 17, 2026
Nov 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering st...Show more
Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.Show less
1Linux
1Linux Kernel
Jun 17, 2026
Nov 7, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_...Show more
A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.Show less
1Opensrcsec
2Grsecurity
Pax
Jun 17, 2026
Oct 31, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to...Show more
An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec. PaX adds a temp buffer to the read_kmem function, which is never freed when an invalid address is supplied. This results in a memory leakage that can lead to a crash of the system. An attacker needs to induce a read to /dev/kmem using an invalid address to exploit this vulnerability.Show less
1Juniper
1Junos
Jun 17, 2026
Oct 9, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivere...Show more
A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.Show less
1Gif2png Project
1Gif2png
Jun 17, 2026
Oct 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
gif2png 2.5.13 has a memory leak in the writefile function.
2Debian
Xen
2Debian Linux
Xen
Jun 17, 2026
Oct 8, 2019
N/A· v4
8.8 HIGH· v3
6.1 MEDIUM· v2
An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled.
3Freerdp
LodevOpensuse
3Freerdp
LeapLodepng
Jun 17, 2026
Oct 4, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is al...Show more
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.Show less
2Freerdp
Opensuse
2Freerdp
Leap
Jun 17, 2026
Oct 4, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
3Linux
NetappOpensuse
17Aff A700s Firmware
Data Availability ServicesH300e Firmware+14 more
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
3Linux
OpensuseRedhat
3Enterprise Linux
LeapLinux Kernel
Jun 17, 2026
Sep 30, 2019
N/A· v4
4.7 MEDIUM· v3
4.7 MEDIUM· v2
In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
1Ibm
2Websphere Mq
Websphere Mq Appliance
Jun 17, 2026
Sep 27, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-F...Show more
IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337.Show less
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Sep 23, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
2Imagemagick
Opensuse
2Imagemagick
Leap
Jun 17, 2026
Sep 23, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Sep 23, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Sep 23, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
3Canonical
ImagemagickOpensuse
4Backports
ImagemagickLeap+1 more
Jun 17, 2026
Sep 23, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.