← Back
CWE-401

1,999 CVEs • Abstraction: Variant • Likelihood of Exploit: Medium

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

JSON object

Loading...

CVEs (1,999)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Siemens
Uvnc
4Sinumerik Access Mymachine/p2p
Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can b...Show more
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.Show less
1Eclipse
1Wakaama
Jun 17, 2026
Feb 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wa...Show more
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.Show less
4Canonical
DebianLinux+1 more
4Debian Linux
LeapLinux Kernel+1 more
Jun 17, 2026
Feb 21, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
1Live555
1Streaming Media
Jun 17, 2026
Feb 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
5Canonical
DebianGraphicsmagick+2 more
5Debian Linux
GraphicsmagickImagemagick+2 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
4Canonical
DebianImagemagick+1 more
4Debian Linux
ImagemagickLeap+1 more
Jun 17, 2026
Feb 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
2Debian
Redhat
7Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+4 more
Jun 17, 2026
Jan 28, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to...Show more
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.Show less
1Opensc Project
1Opensc
Jun 17, 2026
Jan 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
1Gnu
1Recutils
Jun 17, 2026
Jan 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.
1Gnu
1Recutils
Jun 17, 2026
Jan 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a.
1Gnu
1Recutils
Jun 17, 2026
Jan 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a.
1Mz Automation
1Libiec61850
Jun 17, 2026
Jan 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory/lib_memory.c have memory leaks when called from mms/iso_mms/common/mms_value.c, server/mms_mapping/mms_mapping.c, and server/mm...Show more
An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory/lib_memory.c have memory leaks when called from mms/iso_mms/common/mms_value.c, server/mms_mapping/mms_mapping.c, and server/mms_mapping/mms_sv.c (via common/string_utilities.c), as demonstrated by iec61850_9_2_LE_example.c.Show less
1Mz Automation
1Libiec61850
Jun 17, 2026
Jan 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called from Asn1PrimitiveValue_create in mms/asn1/asn1_ber_primitive_value.c, as demonstrated by goose_publis...Show more
An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called from Asn1PrimitiveValue_create in mms/asn1/asn1_ber_primitive_value.c, as demonstrated by goose_publisher_example.c and iec61850_9_2_LE_example.c.Show less
1Axiosys
1Bento4
Jun 17, 2026
Jan 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4_EsdsAtom class in Core/Ap4EsdsAtom.cpp,...Show more
An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4_EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac.Show less
1Libpng
1Libpng
Jun 17, 2026
Jan 11, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
4Canonical
DebianLibtiff+1 more
4Debian Linux
LeapLibtiff+1 more
Jun 17, 2026
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
1Cisco
1Ios
Nov 21, 2024
Oct 5, 2018
N/A· v4
8.6 HIGH· v3
7.8 HIGH· v2
A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a m...Show more
A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by sending invalid data to the Cisco Network Plug and Play agent on an affected device. A successful exploit could allow the attacker to cause a memory leak on the affected device, which could cause the device to reload.Show less
1Htslib
1Htslib
Nov 21, 2024
Jul 10, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the...Show more
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own codeShow less