Common Weakness Enumeration

CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Description

Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-244 ordered by modification date.

1 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-8h84-fhqq-q58v	CVE-2026-48025	MODERATE	golang/github.com/forgekeep/nebula-mesh golang/github.com/juev/nebula-mesh	nebula-mesh: Decrypted CA private key persists in heap after signing	2026-06-26