Browse CVEs

HIGH 7.5 CVE-2022-39004 The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. Emui Mitigation only Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-39005 The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. Emui No fix yet Fix from $1,9502022-09-16 MEDIUM 5.5 CVE-2022-38600 Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c. Mplayer No fix yet Fix from $1,6002022-09-15 MEDIUM 6.5 CVE-2022-40439 An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service v… Bento4 No fix yet Fix from $1,6002022-09-14 HIGH 7.5 CVE-2022-40281 An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SS… Tizenrt Mitigation only Fix from $1,9502022-09-08 HIGH 7.8 CVE-2022-22067 Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compu… Ar8035 Firmware Mitigation only Fix from $1,9502022-09-02 HIGH 7.5 CVE-2021-42522 There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of … Anjuta Mitigation only Fix from $1,9502022-08-25 HIGH 7.5 CVE-2021-42523 There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. … Colord Patch available Fix from $1,9502022-08-25 HIGH 7.5 CVE-2021-4213 A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the se… Enterprise Linux 4.9.3 / 5.1.0+ Fix from $1,9502022-08-24 HIGH 7.5 CVE-2021-3905 A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust av… Enterprise Linux Fast Datapath 2.17.0+ Fix from $1,9502022-08-23 HIGH 7.5 CVE-2021-3690 A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cau… Fuse 2.0.40 / 2.2.10+ Fix from $1,9502022-08-23 MEDIUM 5.5 CVE-2021-3736 A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Me… Linux Kernel after 5.14.20 Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3764 A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerabi… Linux Kernel after 5.14.20 Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2022-36152 tifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan/asan_new_delete.cpp. Tifig No fix yet Fix from $1,6002022-08-16 MEDIUM 5.5 CVE-2022-35110 SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. Swftools No fix yet Fix from $1,6002022-08-16 MEDIUM 6.5 CVE-2022-35433 ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c. Ffjpeg 2021-12-16+ Fix from $1,6002022-08-16 HIGH 7.5 CVE-2021-33645 The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. Fedora 1.2.21+ Fix from $1,9502022-08-10 HIGH 7.5 CVE-2021-33646 The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak. Fedora 1.2.21+ Fix from $1,9502022-08-10 HIGH 8.2 CVE-2022-1012 A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allo… Linux Kernel 5.18+ Fix from $1,9502022-08-05 HIGH 7.8 CVE-2022-35858 The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, den… Mtower No fix yet Fix from $1,9502022-08-04 HIGH 7.1 CVE-2022-1651 A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virt… Linux Kernel 5.15.33 / 5.16.19+ Fix from $1,9502022-07-26 MEDIUM 5.5 CVE-2021-33450 An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c. Netwide Assembler No fix yet Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33451 An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c. Long Range Zip No fix yet Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33452 An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c. Netwide Assembler No fix yet Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33437 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c. Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.3 CVE-2022-22204 An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol (SIP) Application Layer Gateway (ALG) o… Junos Mitigation only Fix from $1,6002022-07-20 HIGH 7.5 CVE-2022-22205 A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) subsystem of the PFE of Juniper … Junos Mitigation only Fix from $1,9502022-07-20 HIGH 7.5 CVE-2022-22209 A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based… Junos No fix yet Fix from $1,9502022-07-20 MEDIUM 5.5 CVE-2021-4135 A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device s… Linux Kernel 5.16+ Fix from $1,6002022-07-14 HIGH 7.1 CVE-2022-26365 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond… Linux Kernel 4.9.322 / 4.14.287+ Fix from $1,9502022-07-05