CWE-401

Medium likelihood

Missing Release of Memory after Effective Lifetime

Parent: CWE-772 - Missing Release of Resource after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

1,867 vulnerabilities with CWE-401
CVE-2025-21737 MEDIUM
Linux Kernel 6.10-6.12.13, 6.13.0-6.13.2 - Use-After-Free in Ceph MDS Auth Path Matching
CVSS 5.5
CVE-2025-1634 HIGH
quarkus-resteasy >=3.16.0.CR1 <3.19.1 - Use-After-Free via Client Request Timeout
CVSS 7.5
CVE-2025-27097 HIGH
GraphQL Mesh - Use-After-Free in DocumentNode Cache
CVSS 7.5
CVE-2025-26311 MEDIUM
libming v0.4.8 - Denial of Service via SWF Clip Actions Parsing
CVSS 6.5
CVE-2025-26308 MEDIUM
libming v0.4.8 - Denial of Service via parseSWF_FILTERLIST Memory Leak
CVSS 6.5
CVE-2025-26307 MEDIUM
libming v0.4.8 - Denial of Service via SWF File Parsing Memory Leak
CVSS 6.5
CVE-2025-26306 MEDIUM
libming v0.4.8 - Denial of Service via Memory Leak in readSizedString
CVSS 6.5
CVE-2025-25469 MEDIUM
FFmpeg < 2025-01-13 - Memory Leak in libavutil/iamf.c
CVSS 6.5
CVE-2025-25199 HIGH
go-crypto-winnative - Memory Corruption
CVSS 7.5
CVE-2025-1152 LOW
GNU Binutils 2.43 - Memory Leak in xstrdup Function
CVSS 3.1
CVE-2025-1151 LOW
GNU Binutils 2.43 - Memory Leak in xmemdup Function
CVSS 3.1
CVE-2025-1150 LOW
GNU Binutils 2.43 - Memory Leak in bfd_malloc Function
CVSS 3.1
CVE-2025-1149 LOW
GNU Binutils 2.43 - Memory Leak in xstrdup Function
CVSS 3.1
CVE-2025-1148 LOW
GNU Binutils 2.43 - Memory Leak in ld/ldelfgen.c link_order_scan Function
CVSS 3.1
CVE-2025-23085 MEDIUM
Node.js < 18.20.6, 20.x < 20.18.2, 22.x < 22.13.1, 23.x < 23.6.1 - Memory Leak via HTTP/2 Socket Closure
CVSS 5.3
CVE-2025-21091 HIGH
BIG-IP 15.1.0-15.1.10 - Memory Leak via SNMP Requests
CVSS 7.5
CVE-2025-21683 MEDIUM
Linux Kernel 5.8-6.12.11 Use-After-Free in BPF Reuseport Socket Handling
CVSS 5.5
CVE-2025-21661 HIGH
Linux Kernel 6.11-6.12.10 - Use-After-Free in GPIO Virtuser Lookup Table
CVSS 7.8
CVE-2025-21599 HIGH
Juniper Junos OS Evolved DoS via Malformed IPv6 Packet Handling
CVSS 7.5
CVE-2025-0241 HIGH
Firefox < 134.0 and 128.6-128.* - Use-After-Free via Text Segmentation
CVSS 7.7
CVE-2024-7708 HIGH
Eclipse Jetty - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2024-14027 MEDIUM
Linux Kernel 6.11-6.12.76 - Unprivileged Local Denial of Service via fremovexattr Error Path File Reference Leak
CVSS 5.5
CVE-2024-42649 MEDIUM
NanoMQ v0.22.10 - Denial of Service via Memory Leak in PUBLISH Message Handling
CVSS 6.5
CVE-2024-6875 MEDIUM
Red Hat Data Grid - Buffer Overflow
CVSS 6.5
CVE-2024-58063 MEDIUM
Linux Kernel - Use-After-Free in RTLWIFI Probe Error Path
CVSS 5.5
Details
Vulnerabilities 1,867
Exploit Likelihood Medium