CWE-401— Missing Release of Memory after Effective Lifetime (Memory Leak)

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.— MITRE CWE catalog

1,863 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-401page 19 of 38

CVE-2022-50515MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() If construction of the array of work queues to handle hpd_rx_irq offload work fails, we need to unwind. Dest…
CVE-2022-50521MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() The ACPI buffer memory (out.pointer) returned by wmi_evaluate_method() is not freed after the call, so it …
CVE-2022-50523MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, …
CVE-2022-50525MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() The fsl_pamu_probe() returns directly when create_csd() failed, leaving irq and memories unreleased. Fix by jumping…
CVE-2022-50528MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leakage This patch fixes potential memory leakage and seg fault in _gpuvm_import_dmabuf() function
CVE-2022-50529MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: test_firmware: fix memory leak in test_firmware_init() When misc_register() failed in test_firmware_init(), the memory pointed by test_fw_config->name is not released. T…
CVE-2022-50531MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: tipc: fix an information leak in tipc_topsrv_kern_subscr Use a 8-byte write to initialize sub.usr_handle in tipc_topsrv_kern_subscr(), otherwise four bytes remain uninit…
CVE-2022-50532MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() In mpt3sas_transport_port_add(), if sas_rphy_add() returns error, sas_rphy_free() needs be cal…
CVE-2022-50537MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will not be freed through rpi_…
CVE-2022-50544MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xh…
CVE-2022-50545MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: r6040: Fix kmemleak in probe and remove There is a memory leaks reported by kmemleak: unreferenced object 0xffff888116111000 (size 2048): comm "modprobe", pid 817…
CVE-2022-50547MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solo_sysfs_init() If device_register() returns error in solo_sysfs_init(), the name allocated by dev_set_name() need be free…
CVE-2022-50548MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: media: i2c: hi846: Fix memory leak in hi846_parse_dt() If any of the checks related to the supported link frequencies fail, then the V4L2 fwnode resources don't get rele…
CVE-2022-50550MEDIUMCVSS 5.5EG 5.5
2025-10-07
In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix memory leak on add_disk() failures When a gendisk is successfully initialized but add_disk() fails such as when a loop device has invalid number of mi…
CVE-2023-0248HIGHCVSS 7.5EG 7.5
2023-12-14
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.
CVE-2023-0597MEDIUMCVSS 5.5EG 5.5
2023-02-23
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get acce…
CVE-2023-0615MEDIUMCVSS 5.5EG 5.5
2023-02-06
A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a…
CVE-2023-1074MEDIUMCVSS 5.5EG 5.5
2023-03-27
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve r…
CVE-2023-20089HIGHCVSS 7.4EG 7.4
2023-02-23
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, whic…
CVE-2023-20251MEDIUMCVSS 6.1EG 6.1
2023-09-27
A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due…
CVE-2023-21666HIGHCVSS 8.4EG 8.4
2023-05-02
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
CVE-2023-22392MEDIUMCVSS 6.5EG 6.5
2023-10-12
A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). PTX3000, PTX5000, QFX1…
CVE-2023-22395MEDIUMCVSS 6.5EG 6.5
2023-01-13
A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In an MPLS scenario specific packets destined to…
CVE-2023-22406MEDIUMCVSS 6.5EG 6.5
2023-01-13
A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). In a segment-routing scenar…
CVE-2023-22410HIGHCVSS 7.5EG 7.5
2023-01-13
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). Devices…
CVE-2023-22414MEDIUMCVSS 6.5EG 6.5
2023-01-13
A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator (FPC) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a he…
CVE-2023-22417HIGHCVSS 7.5EG 7.5
2023-01-13
A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). In an IPsec VPN envi…
CVE-2023-23145HIGHCVSS 7.8EG 7.8
2023-01-20
GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.
CVE-2023-23205MEDIUMCVSS 5.5EG 5.5
2023-02-24
An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c.
CVE-2023-24511HIGHCVSS 5.3EG 7.5
2023-04-12
On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd…
CVE-2023-25399MEDIUMCVSS 5.5EG 5.5
2023-07-05
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted user…
CVE-2023-25566HIGHCVSS 7.5EG 7.5
2023-02-14
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a usern…
CVE-2023-2602LOWCVSS 3.3EG 3.3
2023-06-06
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.
CVE-2023-26083CRITICALCVSS 3.3EG 9.0⚠ KEV
2023-04-06
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalo…
CVE-2023-2618MEDIUMCVSS 5.3EG 5.3
2023-05-10
A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded_bit_strea…
CVE-2023-26257HIGHCVSS 7.5EG 7.5
2023-02-27
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.
CVE-2023-2683MEDIUMCVSS 5.3EG 5.3
2023-06-15
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.
CVE-2023-2700MEDIUMCVSS 5.5EG 5.5
2023-05-15
A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct…
CVE-2023-28096MEDIUMCVSS 4.5EG 4.5
2023-03-15
OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function `parse_mi_request` while performing cover…
CVE-2023-28366HIGHCVSS 7.5EG 7.5
2023-09-01
The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because …
CVE-2023-28982HIGHCVSS 7.5EG 7.5
2023-04-17
A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). In a …
CVE-2023-29163HIGHCVSS 7.5EG 7.5
2023-05-03
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not eva…
CVE-2023-30637HIGHCVSS 7.5EG 7.5
2023-04-13
Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installations with brpc-0.14.0 and later are unaffected.
CVE-2023-31517HIGHCVSS 7.5EG 7.5
2023-05-23
A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file.
CVE-2023-31973MEDIUMCVSS 5.5EG 5.5
2023-05-09
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
CVE-2023-31975CRITICALCVSS 3.3EG 9.8
2023-05-09
yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
CVE-2023-32247HIGHCVSS 7.5EG 7.5
2023-07-24
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of control of resource consumption. An atta…
CVE-2023-33049HIGHCVSS 7.5EG 7.5
2024-02-06
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
CVE-2023-33084HIGHCVSS 7.5EG 7.5
2024-03-04
Transient DOS while processing IE fragments from server during DTLS handshake.
CVE-2023-33086HIGHCVSS 7.5EG 7.5
2024-03-04
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

Map vulnerabilities like CWE-401 to your infrastructure

EchelonGraph correlates every CVE — across CWE-401 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →