Vulnerability index

Browse CVEs

1,784 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory LeakCWE-401 × clear
Dcmtk HIGH 7.5
CVE-2021-41687

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsi…

Fix: after 3.6.6
Fix from $1,950 2022-06-28
Dcmtk HIGH 7.5
CVE-2021-41690

DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST …

Fix: after 3.6.6
Fix from $1,950 2022-06-28
Redis HIGH 7.5
CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.

Patch available
Fix from $1,950 2022-06-23
Open Motion Planning Library HIGH 7.5
CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior.

No fix yet
Fix from $1,950 2022-06-17
Giflib HIGH 8.8
CVE-2021-40633

A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of se…

No fix yet
Fix from $1,950 2022-06-14
Aqt1000 Firmware HIGH 7.5
CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Com…

Mitigation only
Fix from $1,950 2022-06-14
Indoor Ip Camera Firmware HIGH 7.5
CVE-2018-17240

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive inf…

No fix yet
Fix from $1,950 2022-06-10
Unicorn Engine HIGH 7.5
CVE-2022-29693

Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c.

Fix: 2.0.0+
Fix from $1,950 2022-06-02
Swftools HIGH 7.8
CVE-2021-42197

An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allows an attacker to cause code …

Fix: after 2020-12-22
Fix from $1,950 2022-06-02
Spazio HIGH 7.5
CVE-2022-29932

The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data (related to the content of tr…

No fix yet
Fix from $1,950 2022-05-11
Secure Endpoint HIGH 7.5
CVE-2022-20785EPSS 7%

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A v…

Fix: 0.103.5 / 0.104.2+
Fix from $1,950 2022-05-04
Fedora HIGH 7.5
CVE-2022-28487

Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confid…

Patch available
Fix from $1,950 2022-05-04
Jerryscript HIGH 7.5
CVE-2021-41959

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after Re…

Patch available
Fix from $1,950 2022-05-03
Open Motion Planning Library HIGH 7.5
CVE-2021-42218

OMPL v1.5.2 contains a memory leak in VFRRT.cpp

No fix yet
Fix from $1,950 2022-05-03
Matio MEDIUM 5.5
CVE-2022-1515

A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in…

Fix: 1.5.22+
Fix from $1,600 2022-05-02
Emc Powerscale Onefs MEDIUM 6.5
CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PR…

Fix: after 9.3.0
Fix from $1,600 2022-04-12
Linux Kernel MEDIUM 5.5
CVE-2022-27950

In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.

Fix: 5.16.11+
Fix from $1,600 2022-03-28
Linux Kernel MEDIUM 5.5
CVE-2022-0854

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read rand…

Fix: after 5.16
Fix from $1,600 2022-03-23
Linux Kernel HIGH 7.5
CVE-2022-0742EPSS 5%

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of t…

Fix: 5.15.27 / 5.16.13+
Fix from $1,950 2022-03-18
Bareos HIGH 7.5
CVE-2022-24756

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 2…

Fix: 19.2.12 / 20.0.6+
Fix from $1,950 2022-03-15
Descision Manager HIGH 7.5
CVE-2022-0853

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and l…

No fix yet
Fix from $1,950 2022-03-11
Linux Kernel MEDIUM 5.5
CVE-2022-26878

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).

Fix: 5.15.17 / 5.16.3+
Fix from $1,600 2022-03-11
Emui HIGH 7.5
CVE-2021-40047

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability ma…

No fix yet
Fix from $1,950 2022-03-10
Linux Kernel MEDIUM 5.5
CVE-2021-3744

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cau…

Fix: 5.15+
Fix from $1,600 2022-03-04
Libslic3r MEDIUM 5.5
CVE-2021-44961

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exh…

No fix yet
Fix from $1,600 2022-03-01
Routeros HIGH 7.5
CVE-2020-22844

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests.

Mitigation only
Fix from $1,950 2022-02-28
Debian Linux MEDIUM 6.5
CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak s…

No fix yet
Fix from $1,600 2022-02-24
Sterling External Authentication Server HIGH 7.5
CVE-2022-22336

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resource…

Mitigation only
Fix from $1,950 2022-02-23
Tn 5916 Wv T Firmware HIGH 7.5
CVE-2021-46082

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to co…

Fix: after 3.1
Fix from $1,950 2022-02-18
Linux Kernel MEDIUM 5.5
CVE-2022-24959

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.

Fix: 5.16.5+
Fix from $1,600 2022-02-11