← Back
CWE-772

519 CVEs • Abstraction: Base • Likelihood of Exploit: High

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

JSON object

Loading...

CVEs (519)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2F5
Gnu
2Binutils
Traffix Signaling Delivery Controller
Nov 21, 2024
Jan 2, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfi...Show more
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.Show less
2Debian
Jasper Project
2Debian Linux
Jasper
May 6, 2025
Dec 31, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
1Liblas
1Liblas
Nov 21, 2024
Dec 28, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.
1Axiosys
1Bento4
Nov 21, 2024
Dec 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.
1Axiosys
1Bento4
Nov 21, 2024
Dec 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.
3Canonical
OpensuseQemu
3Leap
QemuUbuntu Linux
Nov 21, 2024
Dec 20, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.
3Canonical
FedoraprojectQemu
3Fedora
QemuUbuntu Linux
Nov 21, 2024
Dec 17, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.
3F5
GnuNetapp
3Binutils
Traffix Signaling Delivery ControllerVasa Provider
Nov 21, 2024
Dec 10, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service...Show more
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.Show less
1Libconfuse Project
1Libconfuse
Nov 21, 2024
Nov 30, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
1Powerdns
2Authoritative
Recursor
Nov 21, 2024
Nov 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to...Show more
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.Show less
1Nasm
1Netwide Assembler
Nov 21, 2024
Nov 12, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.
3Debian
Jasper ProjectRedhat
3Debian Linux
FedoraJasper
Oct 15, 2026
Nov 9, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
2Debian
Squid Cache
2Debian Linux
Squid
Nov 21, 2024
Nov 9, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.
4Canonical
DebianFreedesktop+1 more
10Debian Linux
Enterprise LinuxEnterprise Linux Desktop+7 more
Nov 21, 2024
Nov 2, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
3Graphicsmagick
ImagemagickOpensuse
3Graphicsmagick
ImagemagickLeap
Nov 21, 2024
Oct 21, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
1Libpg Query Project
1Libpg Query
Nov 21, 2024
Oct 18, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.
1Ilm
1Openexr
Nov 21, 2024
Oct 17, 2018
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.
2Debian
Wireshark
2Debian Linux
Wireshark
Nov 21, 2024
Oct 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.
1Imagemagick
1Imagemagick
Nov 21, 2024
Oct 5, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
1Cisco
1Ios Xe
Nov 21, 2024
Oct 5, 2018
N/A· v4
7.4 HIGH· v3
6.1 MEDIUM· v2
A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of servi...Show more
A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain CDP packets. An attacker could exploit this vulnerability by sending certain CDP packets to an affected device. A successful exploit could cause an affected device to continuously consume memory and eventually result in a memory allocation failure that leads to a crash, triggering a reload of the affected device.Show less