CWE-401 · Missing Release of Memory after Effective Lifetime (page 14)
Page 14 of 20 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26676 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. syzbot reported a warning [0… |
CVE-2024-26655 | Medium | 5.5 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we… |
CVE-2024-1023 | Medium | 6.5 | 2024-03-27 | A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP c… |
CVE-2021-47180 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: fix memory leak in nci_allocate_device nfcmrvl_disconnect fails to free the hci… |
CVE-2021-47177 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in alloc_iommu() iommu_device_sysfs_add() is called before, so… |
CVE-2021-47173 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: misc/uss720: fix memory leak in uss720_probe uss720_probe forgets to decrease the refcoun… |
CVE-2021-47171 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: fix memory leak in smsc75xx_bind Syzbot reported memory leak in smsc75xx_bind()… |
CVE-2021-47158 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_config_… |
CVE-2021-47150 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cb… |
CVE-2021-47147 | Medium | 6.2 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix a resource leak in an error handling path If an error occurs after a succes… |
CVE-2024-1394 | High | 7.5 | 2024-03-21 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled… |
CVE-2023-52610 | High | 7.5 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defr… |
CVE-2021-47133 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix memory leak in amd_sfh_work Kmemleak tool detected a memory leak in the… |
CVE-2021-47122 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail, alloc… |
CVE-2021-47121 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in cfusbl_device_notify In case of caif_enroll_dev() fail, all… |
CVE-2021-47119 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_fill_super Buffer head references must be released before c… |
CVE-2021-47116 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_mb_init_backend on error path. Fix a memory leak discovered… |
CVE-2021-47105 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: return xsk buffers back to pool when cleaning the ring Currently we only NULL t… |
CVE-2021-47104 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for t… |
CVE-2021-47093 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel_pmc_core: fix memleak on registration failure In case device registra… |
CVE-2021-47089 | Low | 3.3 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: kfence: fix memory leak when cat kfence objects Hulk robot reported a kmemleak problem: … |
CVE-2023-33086 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
CVE-2023-33084 | High | 7.5 | 2024-03-04 | Transient DOS while processing IE fragments from server during DTLS handshake. |
CVE-2023-52581 | Medium | 6.3 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255… |
CVE-2023-52571 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static… |
CVE-2023-52563 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_e… |
CVE-2023-52560 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() When CONFIG_D… |
CVE-2023-52526 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA E… |
CVE-2021-47075 | Medium | 5.3 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmet_alloc_ctrl(), if… |
CVE-2021-47074 | Medium | 5.5 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: nvme-loop: fix memory leak in nvme_loop_create_ctrl() When creating loop ctrl in nvme_loo… |
CVE-2021-47071 | Medium | 5.5 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix a memory leak in error handling paths If 'vmbus_establish_gpadl()' fa… |
CVE-2021-47070 | Medium | 5.5 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix another memory leak in error handling paths Memory allocated by 'vmbu… |
CVE-2021-47064 | Medium | 5.3 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf uninitialized in mt76_dma_tx_queue_skb_raw… |
CVE-2021-47059 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error path This patch fixes a memory leak on… |
CVE-2021-47020 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: soundwire: stream: fix memory leak in stream config error path When stream config is fail… |
CVE-2024-26462 | Medium | 5.5 | 2024-02-29 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. |
CVE-2024-26458 | Medium | 5.3 | 2024-02-29 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. |
CVE-2024-24155 | Medium | 6.5 | 2024-02-29 | Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got… |
CVE-2024-24150 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2024-24149 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2024-24147 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. |
CVE-2024-24146 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. |
CVE-2024-24148 | High | 7.5 | 2024-02-28 | A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2021-47053 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of pad It appears there are several failure return pat… |
CVE-2021-47052 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: sa2ul - Fix memory leak of rxd There are two error return paths that are not free… |
CVE-2021-47042 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Free local data after use Fixes the following memory leak in dc_link_con… |
CVE-2021-47033 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix tx skb dma unmap The first pointer in the txp needs to be unmapped as w… |
CVE-2021-47032 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix tx skb dma unmap The first pointer in the txp needs to be unmapped as w… |
CVE-2021-47031 | Medium | 4.3 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix memory leak in mt7921_coredump_work Fix possible memory leak in mt7921_… |
CVE-2021-47030 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix memory leak in mt7615_coredump_work Similar to the issue fixed in mt792… |
CVE-2021-47024 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot [1], there is… |
CVE-2021-47022 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix memleak when mt7615_unregister_device() mt7615_tx_token_put() should ge… |
CVE-2021-47021 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915_unregister_device() mt7915_tx_token_put() should ge… |
CVE-2021-47009 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak on object td Two error return paths are neglecting to free… |
CVE-2021-46996 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memleak from userdata error path in new objects Release object… |
CVE-2021-46985 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails… |
CVE-2020-36786 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash In the case where… |
CVE-2021-46972 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix leaked dentry Since commit 6815f479ca90 ("ovl: use only uppermetacopy state in o… |
CVE-2021-46968 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix zcard and zqueue hot-unplug memleak Tests with kvm and a kmemdebug kerne… |
CVE-2021-46956 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix memory leak in virtio_fs_probe() When accidentally passing twice the same t… |
CVE-2021-46944 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imu_fmt We are losing the reference to an a… |
CVE-2020-36777 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leak… |
CVE-2024-27508 | High | 7.5 | 2024-02-27 | Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c. |
CVE-2024-27507 | High | 7.5 | 2024-02-27 | libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp. |
CVE-2021-46924 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced w… |
CVE-2024-25770 | Medium | 4.3 | 2024-02-26 | libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c. |
CVE-2024-24750 | Medium | 6.5 | 2024-02-16 | Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consuming the incoming body ((or consuming it… |
CVE-2024-0240 | Medium | 6.5 | 2024-02-15 | A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this res… |
CVE-2022-23091 | Medium | 4.0 | 2024-02-15 | A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unpr… |
CVE-2024-25740 | Medium | 5.5 | 2024-02-12 | A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBI_IOCATT, because kobj->name is not released. |
CVE-2024-25450 | High | 8.8 | 2024-02-09 | imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts(). |
CVE-2023-33049 | High | 7.5 | 2024-02-06 | Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. |
CVE-2024-24267 | High | 7.5 | 2024-02-05 | gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function. |
CVE-2024-24265 | High | 7.5 | 2024-02-05 | gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_internal function. |
CVE-2024-24259 | High | 7.5 | 2024-02-05 | freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function. |
CVE-2024-24258 | High | 7.5 | 2024-02-05 | freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. |
CVE-2024-23820 | Medium | 5.3 | 2024-01-26 | OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on the model… |
CVE-2024-22563 | High | 7.5 | 2024-01-19 | openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. |
CVE-2023-51258 | Medium | 5.5 | 2024-01-18 | A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nas… |
CVE-2023-4969 | Medium | 6.5 | 2024-01-16 | A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on va… |
CVE-2024-21613 | Medium | 6.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a… |
CVE-2024-21611 | High | 7.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allo… |
CVE-2024-21599 | Medium | 6.5 | 2024-01-12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an a… |
CVE-2023-7192 | Medium | 5.5 | 2024-01-02 | A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacke… |
CVE-2023-0248 | High | 7.5 | 2023-12-14 | An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader… |
CVE-2023-38380 | High | 7.5 | 2023-12-12 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All ve… |
CVE-2023-48958 | Medium | 5.5 | 2023-12-07 | gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589. |
CVE-2023-46871 | Medium | 5.3 | 2023-12-07 | GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a den… |
CVE-2023-6180 | Medium | 5.3 | 2023-12-05 | The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exha… |
CVE-2023-6299 | Medium | 4.3 | 2023-11-26 | A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument… |
CVE-2023-48090 | High | 7.1 | 2023-11-20 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329. |
CVE-2023-48039 | Medium | 5.5 | 2023-11-20 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75. |
CVE-2023-41102 | High | 7.5 | 2023-11-17 | An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may l… |
CVE-2023-47384 | Medium | 5.5 | 2023-11-14 | MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulne… |
CVE-2023-5954 | Medium | 5.9 | 2023-11-09 | HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these… |
CVE-2023-43076 | Medium | 6.5 | 2023-11-02 | Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially exploit this vulnera… |
CVE-2023-5349 | Medium | 5.3 | 2023-10-30 | A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion. |
CVE-2023-44193 | Medium | 5.5 | 2023-10-13 | An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a local, low… |
CVE-2023-44192 | High | 7.5 | 2023-10-13 | An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to c… |
CVE-2023-44183 | Medium | 6.5 | 2023-10-13 | An Improper Input Validation vulnerability in the VxLAN packet forwarding engine (PFE) of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices a… |