Common Weakness Enumeration

CWE-401 Missing Release of Memory after Effective Lifetime

Description

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-401 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-c2gf-v879-257j CVE-2026-48043 MODERATE

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

2026-10-06
GHSA-54p9-h82j-f925 CVE-2026-104874 MODERATE

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

2026-10-05
GHSA-vc2v-76pw-4v95 CVE-2026-87776 HIGH

compression vulnerable to Denial of Service via memory leak on premature response close

2026-10-05
GHSA-3q5f-gmjc-38r8 CVE-2026-56371 LOW

ImageMagick: Memory leak in coders/txt.c without freetype

2026-09-24
GHSA-98gv-6gmj-cm6m - LOW

Duplicate Advisory: ImageMagick: Memory leak in coders/txt.c without freetype

2026-09-24
GHSA-h2qv-fj59-j46j CVE-2026-48059 HIGH

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

2026-09-18
GHSA-6jv9-x5w9-2ccm CVE-2026-48006 HIGH

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

2026-09-18
GHSA-9pj6-vhgr-3mwh CVE-2026-63128 HIGH -

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

2026-09-16
GHSA-fm4g-76c9-7w69 CVE-2026-69208 HIGH

Http4s: DigestAuth nonce map grows unbounded

2026-09-15
GHSA-cvhv-g4rq-3hmw - LOW

ImageMagick: Memory Leak when providing invalid options to the cli

2026-09-08
GHSA-v2fc-qm4h-8hqv CVE-2026-79771 MODERATE

Nokogiri XSLT transform has a memory leak

2026-09-02
GHSA-rh9x-7xjc-vwx2 - MODERATE

Duplicate Advisory: Nokogiri XSLT transform has a memory leak

2026-09-02
GHSA-wfx3-6g53-9fgc CVE-2026-56368 MODERATE

ImageMagick: Memory Leak in multiple coders that write raw pixel data

2026-08-26
GHSA-9mqv-5hh9-4cgg CVE-2026-73565 MODERATE

Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake

2026-08-13
GHSA-p9jm-q85p-7mcp CVE-2026-56818 MODERATE

Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

2026-08-07
GHSA-83f7-v6px-pp3h CVE-2026-41840 MODERATE

Spring Framework Denial of Service via Multipart Requests in WebFlux

2026-07-30
GHSA-52jp-gj8w-j6xh CVE-2026-67430 MODERATE

MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood

2026-07-30
GHSA-xpxj-f2fm-rqch CVE-2026-67437 HIGH

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

2026-07-30
GHSA-h5r4-w88w-7ccr - LOW

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

2026-07-24
GHSA-h58x-r7f7-rh84 - LOW

ImageMagick: Memory Leak in ICON decoder when allocation fails

2026-07-24
GHSA-m596-67p7-69wh - LOW

ImageMagick: Memory leak in VIFF encoder when allocation fails

2026-07-24
GHSA-r628-69v2-2f9c - LOW

ImageMagick: Memory Leak in MIFF encoder when allocaton fails

2026-07-24
GHSA-h7f2-f9cc-h2gv - LOW

ImageMagick: Memory Leak in YUV decoder when opening of blob fails

2026-07-24
GHSA-jfq9-q63x-rc63 - LOW

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

2026-07-24
GHSA-99w9-hv66-rfv7 - LOW

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

2026-07-24