CWE-401
Medium likelihoodMissing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
1,867 vulnerabilities with CWE-401
CVE-2025-21737
MEDIUM
Linux Kernel 6.10-6.12.13, 6.13.0-6.13.2 - Use-After-Free in Ceph MDS Auth Path Matching
CVSS 5.5
CVE-2025-1634
HIGH
quarkus-resteasy >=3.16.0.CR1 <3.19.1 - Use-After-Free via Client Request Timeout
CVSS 7.5
CVE-2025-27097
HIGH
GraphQL Mesh - Use-After-Free in DocumentNode Cache
CVSS 7.5
CVE-2025-26311
MEDIUM
libming v0.4.8 - Denial of Service via SWF Clip Actions Parsing
CVSS 6.5
CVE-2025-26308
MEDIUM
libming v0.4.8 - Denial of Service via parseSWF_FILTERLIST Memory Leak
CVSS 6.5
CVE-2025-26307
MEDIUM
libming v0.4.8 - Denial of Service via SWF File Parsing Memory Leak
CVSS 6.5
CVE-2025-26306
MEDIUM
libming v0.4.8 - Denial of Service via Memory Leak in readSizedString
CVSS 6.5
CVE-2025-25469
MEDIUM
FFmpeg < 2025-01-13 - Memory Leak in libavutil/iamf.c
CVSS 6.5
CVE-2025-25199
HIGH
go-crypto-winnative - Memory Corruption
CVSS 7.5
CVE-2025-1152
LOW
GNU Binutils 2.43 - Memory Leak in xstrdup Function
CVSS 3.1
CVE-2025-1151
LOW
GNU Binutils 2.43 - Memory Leak in xmemdup Function
CVSS 3.1
CVE-2025-1150
LOW
GNU Binutils 2.43 - Memory Leak in bfd_malloc Function
CVSS 3.1
CVE-2025-1149
LOW
GNU Binutils 2.43 - Memory Leak in xstrdup Function
CVSS 3.1
CVE-2025-1148
LOW
GNU Binutils 2.43 - Memory Leak in ld/ldelfgen.c link_order_scan Function
CVSS 3.1
CVE-2025-23085
MEDIUM
Node.js < 18.20.6, 20.x < 20.18.2, 22.x < 22.13.1, 23.x < 23.6.1 - Memory Leak via HTTP/2 Socket Closure
CVSS 5.3
CVE-2025-21091
HIGH
BIG-IP 15.1.0-15.1.10 - Memory Leak via SNMP Requests
CVSS 7.5
CVE-2025-21683
MEDIUM
Linux Kernel 5.8-6.12.11 Use-After-Free in BPF Reuseport Socket Handling
CVSS 5.5
CVE-2025-21661
HIGH
Linux Kernel 6.11-6.12.10 - Use-After-Free in GPIO Virtuser Lookup Table
CVSS 7.8
CVE-2025-21599
HIGH
Juniper Junos OS Evolved DoS via Malformed IPv6 Packet Handling
CVSS 7.5
CVE-2025-0241
HIGH
Firefox < 134.0 and 128.6-128.* - Use-After-Free via Text Segmentation
CVSS 7.7
CVE-2024-7708
HIGH
Eclipse Jetty - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2024-14027
MEDIUM
Linux Kernel 6.11-6.12.76 - Unprivileged Local Denial of Service via fremovexattr Error Path File Reference Leak
CVSS 5.5
CVE-2024-42649
MEDIUM
NanoMQ v0.22.10 - Denial of Service via Memory Leak in PUBLISH Message Handling
CVSS 6.5
CVE-2024-6875
MEDIUM
Red Hat Data Grid - Buffer Overflow
CVSS 6.5
CVE-2024-58063
MEDIUM
Linux Kernel - Use-After-Free in RTLWIFI Probe Error Path
CVSS 5.5
Details
Vulnerabilities
1,867
Exploit Likelihood
Medium