CVE & Exploit Intelligence Database

CVE-2022-40281 7.5 HIGH 1 Writeup EPSS 0.00

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SSL_get_peer_certificate, leading to information disclosure.

CWE-401 Sep 08, 2022

CVE-2022-22067 7.5 HIGH EPSS 0.00

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CWE-401 Sep 02, 2022

CVE-2021-3574 3.3 LOW 2 Writeups EPSS 0.00

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

CWE-401 Aug 26, 2022

CVE-2021-42523 7.5 HIGH EPSS 0.00

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CWE-401 Aug 25, 2022

CVE-2021-42522 7.5 HIGH EPSS 0.00

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.

CWE-401 Aug 25, 2022

CVE-2021-4213 7.5 HIGH 1 Writeup EPSS 0.00

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

CWE-401 Aug 24, 2022

CVE-2021-3905 7.5 HIGH 1 Writeup EPSS 0.00

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

CWE-401 Aug 23, 2022

CVE-2021-3764 5.5 MEDIUM 1 Writeup EPSS 0.00

A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability.

CWE-401 Aug 23, 2022

CVE-2021-3736 5.5 MEDIUM 1 Writeup EPSS 0.00

A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.

CWE-401 Aug 23, 2022

CVE-2021-3690 7.5 HIGH EPSS 0.00

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

CWE-401 Aug 23, 2022

CVE-2022-36152 5.5 MEDIUM EPSS 0.00

tifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan/asan_new_delete.cpp.

CWE-401 Aug 16, 2022

CVE-2022-35433 6.5 MEDIUM EPSS 0.00

ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c.

CWE-401 Aug 16, 2022

CVE-2022-35110 5.5 MEDIUM EPSS 0.00

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.

CWE-401 Aug 16, 2022

CVE-2021-33646 7.5 HIGH EPSS 0.00

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

CWE-401 Aug 10, 2022

CVE-2021-33645 7.5 HIGH EPSS 0.00

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

CWE-401 Aug 10, 2022

CVE-2022-1012 8.2 HIGH 1 PoC EPSS 0.00

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

CWE-401 Aug 05, 2022

CVE-2022-35858 7.8 HIGH 1 Writeup EPSS 0.00

The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEE_PopulateTransientObject with a large number in the parameter attrCount.

CWE-401 Aug 04, 2022

CVE-2022-1651 7.1 HIGH EPSS 0.00

A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.

CWE-401 Jul 26, 2022

CVE-2021-33452 5.5 MEDIUM EPSS 0.00

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.

CWE-401 Jul 26, 2022

CVE-2021-33451 5.5 MEDIUM EPSS 0.00

An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.

CWE-401 Jul 26, 2022