CWE-401

Medium likelihood

Missing Release of Memory after Effective Lifetime

Parent: CWE-772 - Missing Release of Resource after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

1,867 vulnerabilities with CWE-401
CVE-2026-23352 MEDIUM
x86/efi: defer freeing of boot services memory
CVSS 5.5
CVE-2026-23350 HIGH
drm/xe/queue: Call fini on exec queue creation fail
CVSS 7.8
CVE-2026-23339 MEDIUM
nfc: nci: free skb on nci_transceive early error paths
CVSS 5.5
CVE-2026-23337 MEDIUM
pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()
CVSS 5.5
CVE-2026-23335 MEDIUM
RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
CVSS 5.5
CVE-2026-23330 MEDIUM
nfc: nci: complete pending data exchange on device close
CVSS 5.5
CVE-2026-23297 MEDIUM
nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
CVSS 5.5
CVE-2026-33852 HIGH
Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7
CVSS 7.5
CVE-2026-33856 HIGH
Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7
CVSS 7.5
CVE-2026-32874 HIGH
UltraJSON 5.4.0-5.11.0 - Large Integer Memory Leak Denial of Service
CVSS 7.5
CVE-2026-30873 MEDIUM
OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens
CVSS 4.9
CVE-2026-23263 MEDIUM
io_uring/zcrx: fix page array leak
CVSS 5.5
CVE-2026-23261 MEDIUM
nvme-fc: release admin tagset if init fails
CVSS 5.5
CVE-2026-23260 MEDIUM
regmap: maple: free entry on mas_store_gfp() failure
CVSS 5.5
CVE-2026-23258 MEDIUM
net: liquidio: Initialize netdev pointer before queue setup
CVSS 5.5
CVE-2026-0639 LOW
OpenHarmony <=6.0 liteos_a - Memory Leak Denial of Service
CVSS 3.3
CVE-2026-1605 HIGH
Eclipse Jetty 12.0.0-12.0.31/12.1.0-12.0.5 - Memory Corruption
CVSS 7.5
CVE-2026-20021 MEDIUM
Cisco Adaptive Security Appliance and Firepower Threat Defense Software - Denial of Service via OSPF Packet Parsing
CVSS 4.3
CVE-2026-20106 MEDIUM
Cisco ASA & FTD Unauthenticated DoS via Remote Access SSL VPN
CVSS 5.3
CVE-2026-20105 HIGH
Cisco ASA & FTD Authenticated DoS via Remote Access SSL VPN
CVSS 7.7
CVE-2026-20015 MEDIUM
Cisco Secure Firewall ASA/FTD - DoS
CVSS 5.8
CVE-2026-20014 HIGH
Cisco Secure Firewall ASA/FTD - DoS
CVSS 7.7
CVE-2026-20013 MEDIUM
Cisco Secure Firewall ASA/FTD - DoS
CVSS 5.8
CVE-2026-25988 MEDIUM
ImageMagick <7.1.2-15/6.9.13-40 - Memory Corruption
CVSS 5.3
CVE-2026-25969 MEDIUM
ImageMagick <7.1.2-15 - Memory Corruption
CVSS 5.3
Details
Vulnerabilities 1,867
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits