Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

CVEs (469)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16641 1Imagemagick 1Imagemagick Nov 21, 2024 Sep 6, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c.
CVE-2018-16640 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Sep 6, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
CVE-2018-16548 1Gdraheim 1Zziplib Jul 10, 2025 Sep 5, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
CVE-2018-6554 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux Jun 17, 2026 Sep 4, 2018 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeated...Show more Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.Show less
CVE-2018-10924 1Gluster 1Glusterfs Nov 21, 2024 Sep 4, 2018 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host m...Show more It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.Show less
CVE-2018-1999043 1Jenkins 1Jenkins Nov 21, 2024 Aug 23, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user...Show more A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials.Show less
CVE-2018-1000215 1Davegamble 1Cjson Jul 22, 2025 Aug 20, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be...Show more Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.Show less
CVE-2018-7994 1Huawei 7Ips Module Ngfw ModuleNip6300+4 more Jun 17, 2026 Jul 31, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vuln...Show more Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.Show less
CVE-2018-5536 1F5 1Big Ip Access Policy Manager Jun 17, 2026 Jul 25, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM mo...Show more A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.Show less
CVE-2018-14437 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
CVE-2018-14436 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
CVE-2018-14435 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
CVE-2018-14434 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
CVE-2018-14073 2Libsixel Project Saitoha 2Libsixel Libsixel Apr 24, 2026 Jul 15, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
CVE-2018-14072 2Libsixel Project Saitoha 2Libsixel Libsixel Apr 24, 2026 Jul 15, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.
CVE-2018-13843 1Htslib 1Htslib Nov 21, 2024 Jul 10, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library...Show more An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library (such as test/test_bgzf.c in the original report) and is not a library issueShow less
CVE-2018-13420 1Gperftools Project 1Gperftools Nov 21, 2024 Jul 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from...Show more Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer programShow less
CVE-2018-13419 1Libsndfile Project 1Libsndfile Nov 21, 2024 Jul 7, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue
CVE-2017-15824 1Google 1Android Nov 21, 2024 Jul 6, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initial...Show more In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initialization to flash memory using WriteToPartition() which may potentially leak memory.Show less
CVE-2018-13153 2Canonical Imagemagick 2Imagemagick Ubuntu Linux Nov 21, 2024 Jul 5, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.

Previous 1...91011...24 Next