CWE-401 · Missing Release of Memory after Effective Lifetime (page 16)
Page 16 of 19 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28487 | High | 7.5 | 2022-05-04 | Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. |
CVE-2021-42218 | High | 7.5 | 2022-05-03 | OMPL v1.5.2 contains a memory leak in VFRRT.cpp |
CVE-2021-41959 | High | 7.5 | 2022-05-03 | JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, whic… |
CVE-2022-1515 | Medium | 5.5 | 2022-05-02 | A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS. |
CVE-2022-23159 | Medium | 4.8 | 2022-04-12 | Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PRIV_LOGIN_S… |
CVE-2022-27950 | Medium | 5.5 | 2022-03-28 | In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition. |
CVE-2022-0854 | Medium | 5.5 | 2022-03-23 | A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory… |
CVE-2022-0742 | Critical | 9.1 | 2022-03-18 | Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or… |
CVE-2022-24756 | High | 7.5 | 2022-03-15 | Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and… |
CVE-2022-0853 | High | 7.5 | 2022-03-11 | A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to in… |
CVE-2022-26878 | Medium | 5.5 | 2022-03-11 | drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed). |
CVE-2021-40047 | High | 7.5 | 2022-03-10 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect i… |
CVE-2021-3744 | Medium | 5.5 | 2022-03-04 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denia… |
CVE-2021-4002 | Medium | 4.4 | 2022-03-03 | A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligne… |
CVE-2021-44961 | Medium | 5.5 | 2022-03-01 | A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust avail… |
CVE-2020-22844 | High | 7.5 | 2022-02-28 | A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests. |
CVE-2022-24599 | Medium | 6.5 | 2022-02-24 | In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive i… |
CVE-2022-22336 | High | 7.5 | 2022-02-23 | IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing… |
CVE-2021-46082 | High | 7.5 | 2022-02-18 | Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a me… |
CVE-2021-45346 | Medium | 4.3 | 2022-02-14 | A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is… |
CVE-2022-24959 | Medium | 5.5 | 2022-02-11 | An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c. |
CVE-2022-20046 | Medium | 5.5 | 2022-02-09 | In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges ne… |
CVE-2021-37205 | High | 7.5 | 2022-02-09 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl… |
CVE-2022-23585 | Medium | 4.3 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `… |
CVE-2022-23578 | Medium | 4.3 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the implementation of `ImmutableExecutorStat… |
CVE-2021-46481 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c. |
CVE-2022-22174 | High | 7.5 | 2022-01-19 | A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be fre… |
CVE-2022-22173 | High | 7.5 | 2022-01-19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauth… |
CVE-2022-22172 | Medium | 6.5 | 2022-01-19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Ev… |
CVE-2022-22168 | Medium | 6.5 | 2022-01-19 | An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigg… |
CVE-2022-22155 | Medium | 6.5 | 2022-01-19 | An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in Juniper Networks Junos OS allows an adjacent attacke… |
CVE-2021-23218 | Medium | 5.3 | 2022-01-10 | When running with FIPS mode enabled, Mirantis Container Runtime 20.10.8 leaks memory during TLS Handshakes which could be abused to cause a denial of service. |
CVE-2021-45481 | Medium | 6.5 | 2021-12-25 | In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation a… |
CVE-2021-45480 | Medium | 5.5 | 2021-12-24 | An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the __rds_conn_create() function in net/rds/connection.c in a certain com… |
CVE-2021-44542 | High | 7.5 | 2021-12-23 | A memory leak vulnerability was found in Privoxy when handling errors. |
CVE-2021-44541 | High | 7.5 | 2021-12-23 | A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destinatio… |
CVE-2021-44540 | High | 7.5 | 2021-12-23 | A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing. |
CVE-2021-37046 | High | 7.5 | 2021-12-07 | There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to… |
CVE-2021-41229 | Medium | 4.3 | 2021-11-12 | BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be… |
CVE-2020-23876 | High | 7.5 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText. |
CVE-2021-34598 | High | 7.5 | 2021-11-10 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for da… |
CVE-2021-36993 | High | 7.5 | 2021-10-28 | There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-40114 | Medium | 6.8 | 2021-10-27 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remot… |
CVE-2021-34792 | High | 8.6 | 2021-10-27 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2021-41145 | High | 8.6 | 2021-10-25 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2021-31367 | Medium | 6.5 | 2021-10-19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an a… |
CVE-2021-30844 | High | 7.5 | 2021-10-19 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A remote attacker may… |
CVE-2020-22679 | Medium | 5.5 | 2021-10-12 | Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. |
CVE-2020-22673 | Medium | 5.5 | 2021-10-12 | Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. |
CVE-2021-34698 | High | 8.6 | 2021-10-06 | A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system… |
CVE-2020-20665 | High | 7.5 | 2021-09-30 | rudp v0.6 was discovered to contain a memory leak in the component main.c. |
CVE-2021-34740 | High | 7.4 | 2021-09-23 | A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacke… |
CVE-2021-33365 | Medium | 5.5 | 2021-09-13 | Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33363 | Medium | 5.5 | 2021-09-13 | Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33361 | Medium | 5.5 | 2021-09-13 | Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33366 | Medium | 5.5 | 2021-09-13 | Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33364 | Medium | 5.5 | 2021-09-13 | Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-39176 | High | 7.5 | 2021-08-31 | detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not rel… |
CVE-2021-39282 | High | 7.5 | 2021-08-18 | Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. |
CVE-2021-22424 | Medium | 5.5 | 2021-08-03 | A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service. |
CVE-2021-34431 | Medium | 6.5 | 2021-07-22 | In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory le… |
CVE-2021-25701 | Medium | 5.5 | 2021-07-21 | The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety of IOCTLs, which al… |
CVE-2020-22650 | High | 7.5 | 2021-07-19 | A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash triggered by the occurrence of a larg… |
CVE-2021-20108 | High | 7.5 | 2021-07-19 | Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verif… |
CVE-2021-0293 | Medium | 5.5 | 2021-07-15 | A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'sho… |
CVE-2021-26090 | Medium | 5.3 | 2021-07-12 | A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an una… |
CVE-2021-1598 | Medium | 6.5 | 2021-07-08 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthen… |
CVE-2021-1597 | Medium | 6.5 | 2021-07-08 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthen… |
CVE-2021-1596 | Medium | 6.5 | 2021-07-08 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthen… |
CVE-2021-1595 | Medium | 6.5 | 2021-07-08 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthen… |
CVE-2021-22341 | Medium | 4.9 | 2021-06-29 | There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vuln… |
CVE-2021-34389 | Medium | 5.0 | 2021-06-21 | Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user… |
CVE-2021-1564 | Medium | 6.5 | 2021-06-04 | Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Serie… |
CVE-2021-1563 | Medium | 6.5 | 2021-06-04 | Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Serie… |
CVE-2020-22056 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. |
CVE-2020-22054 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. |
CVE-2020-22051 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
CVE-2020-22049 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c. |
CVE-2020-22048 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. |
CVE-2020-22046 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. |
CVE-2021-3544 | Medium | 6.5 | 2021-06-02 | Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-u… |
CVE-2020-22044 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. |
CVE-2021-26111 | Medium | 6.5 | 2021-06-01 | A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an… |
CVE-2020-22043 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. |
CVE-2020-22042 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graph… |
CVE-2020-22041 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. |
CVE-2020-22040 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. |
CVE-2020-22039 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. |
CVE-2020-22038 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. |
CVE-2020-22037 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. |
CVE-2021-20237 | High | 7.5 | 2021-05-28 | An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated… |
CVE-2021-28652 | Medium | 4.9 | 2021-05-27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache M… |
CVE-2021-28651 | High | 7.5 | 2021-05-27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with… |
CVE-2021-20209 | High | 7.5 | 2021-05-25 | A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured. |
CVE-2020-25672 | High | 7.5 | 2021-05-25 | A memory leak vulnerability was found in Linux kernel in llcp_sock_connect |
CVE-2020-20451 | High | 7.5 | 2021-05-25 | Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. |
CVE-2021-32032 | High | 7.5 | 2021-05-21 | In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abor… |
CVE-2020-21839 | Medium | 6.5 | 2021-05-17 | An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638. |
CVE-2021-27386 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-28665 | High | 7.5 | 2021-05-06 | Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memor… |