Skip to content
Noroxi

CWE-401 · 1,858 records

Missing Release of Memory after Effective Lifetime

CVEs in this class

1,858 records

  • CVE-2020-13934
    49Plan

    An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 proces

    HighCVSS 7.5No exploitEPSS 64%

    apache · tomcatJul 14, 2020

  • CVE-2016-6304
    49Plan

    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a d

    HighCVSS 7.5No exploitEPSS 63%

    openssl · opensslSep 26, 2016

  • CVE-2023-26083
    43Plan

    Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver a

    LowCVSS 3.3KEVWeaponizedEPSS 1%

    arm · 5th gen gpu architecture kernel driverApr 6, 2023

  • CVE-2016-4232
    41Plan

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    HighCVSS 7.5Proof of conceptEPSS 36%

    adobe · flash player desktop runtimeJul 12, 2016

  • CVE-2019-12265
    39Monitor

    Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.

    MediumCVSS 5.3No exploitEPSS 60%

    windriver · vxworksAug 9, 2019

  • CVE-2026-46289
    39Monitor

    lib/scatterlist: fix length calculations in extract_kvec_to_sg

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linux kernelJun 8, 2026

  • CVE-2019-6128
    36Monitor

    The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

    HighCVSS 8.8No exploitEPSS 4%

    libtiff · libtiffJan 11, 2019

  • CVE-2021-40633
    36Monitor

    A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or den

    HighCVSS 8.8No exploitEPSS 2%

    giflib project · giflibJun 14, 2022

  • CVE-2026-87078
    36Monitor

    Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

    CriticalCVSS 9.1No exploitEPSS 1%

    Sep 22, 2026

  • CVE-2023-33718
    35Monitor

    mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp

    HighCVSS 8.8No exploitEPSS 1%

    mp4v2 project · mp4v2May 31, 2023

  • CVE-2024-25450
    35Monitor

    imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().

    HighCVSS 8.8No exploitEPSS 1%

    enlightenment · imlib2Feb 9, 2024

  • CVE-2019-17340
    35Monitor

    An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-tabl

    HighCVSS 8.8No exploitEPSS 0%

    xen · xenOct 7, 2019

  • CVE-2021-1387
    34Monitor

    Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · unified computing systemFeb 24, 2021

  • CVE-2021-1353
    34Monitor

    Cisco StarOS IPv4 Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · starosJan 20, 2021

  • CVE-2023-38380
    34Monitor

    A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl.

    HighCVSS 8.7No exploitEPSS 1%

    siemens · 6gk7243-8rx30-0xe0 firmwareDec 12, 2023

  • CVE-2026-48059
    34Monitor

    Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

    HighCVSS 8.7No exploitEPSS 1%

    netty · nettyJun 12, 2026

  • CVE-2026-48006
    34Monitor

    Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

    HighCVSS 8.7No exploitEPSS 1%

    netty · nettyJun 12, 2026

  • CVE-2025-20133
    34Monitor

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vu

    HighCVSS 8.6No exploitEPSS 1%

    cisco · cisco adaptive security appliance (asa) softwareAug 14, 2025

  • CVE-2026-93436
    34Monitor

    vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

    HighCVSS 8.7No exploitEPSS 1%

    vllm · vllmSep 17, 2026

  • CVE-2026-35505
    34Monitor

    OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime

    HighCVSS 8.7No exploitEPSS 1%

    offis dicom · dcmtk toolkitJun 30, 2026

  • CVE-2026-50254
    34Monitor

    OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime

    HighCVSS 8.7No exploitEPSS 1%

    offis dicom · dcmtk toolkitJun 30, 2026

  • CVE-2026-44660
    34Monitor

    UltraJSON: Memory Leak in ujson.dump() on Write Failure

    HighCVSS 8.7No exploitEPSS 1%

    ultrajson project · ultrajsonMay 27, 2026

  • CVE-2026-94627
    34Monitor

    vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

    HighCVSS 8.7No exploitEPSS 1%

    vllm · vllmSep 21, 2026

  • CVE-2025-20239
    34Monitor

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu

    HighCVSS 8.6No exploitEPSS 1%

    cisco · iosAug 14, 2025

  • CVE-2026-3650
    34Monitor

    Grassroots DICOM Missing release of memory after effective lifetime

    HighCVSS 8.7No exploitEPSS 1%

    grassroots · grassroots dicom (gdcm)Mar 26, 2026

All vulnerability classes