Browse CVEs

HIGH 7.5 CVE-2021-41687 DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsi… Dcmtk after 3.6.6 Fix from $1,9502022-06-28 HIGH 7.5 CVE-2021-41690 DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST … Dcmtk after 3.6.6 Fix from $1,9502022-06-28 HIGH 7.5 CVE-2022-33105 Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. Redis Patch available Fix from $1,9502022-06-23 HIGH 7.5 CVE-2021-41490 Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior. Open Motion Planning Library No fix yet Fix from $1,9502022-06-17 HIGH 8.8 CVE-2021-40633 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of se… Giflib No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2021-35078 Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Com… Aqt1000 Firmware Mitigation only Fix from $1,9502022-06-14 HIGH 7.5 CVE-2018-17240 There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive inf… Indoor Ip Camera Firmware No fix yet Fix from $1,9502022-06-10 HIGH 7.5 CVE-2022-29693 Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c. Unicorn Engine 2.0.0+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2021-42197 An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allows an attacker to cause code … Swftools after 2020-12-22 Fix from $1,9502022-06-02 HIGH 7.5 CVE-2022-29932 The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data (related to the content of tr… Spazio No fix yet Fix from $1,9502022-05-11 HIGH 7.5 CVE-2022-20785EPSS 7% On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A v… Secure Endpoint 0.103.5 / 0.104.2+ Fix from $1,9502022-05-04 HIGH 7.5 CVE-2022-28487 Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confid… Fedora Patch available Fix from $1,9502022-05-04 HIGH 7.5 CVE-2021-41959 JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after Re… Jerryscript Patch available Fix from $1,9502022-05-03 HIGH 7.5 CVE-2021-42218 OMPL v1.5.2 contains a memory leak in VFRRT.cpp Open Motion Planning Library No fix yet Fix from $1,9502022-05-03 MEDIUM 5.5 CVE-2022-1515 A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in… Matio 1.5.22+ Fix from $1,6002022-05-02 MEDIUM 6.5 CVE-2022-23159 Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PR… Emc Powerscale Onefs after 9.3.0 Fix from $1,6002022-04-12 MEDIUM 5.5 CVE-2022-27950 In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition. Linux Kernel 5.16.11+ Fix from $1,6002022-03-28 MEDIUM 5.5 CVE-2022-0854 A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read rand… Linux Kernel after 5.16 Fix from $1,6002022-03-23 HIGH 7.5 CVE-2022-0742EPSS 5% Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of t… Linux Kernel 5.15.27 / 5.16.13+ Fix from $1,9502022-03-18 HIGH 7.5 CVE-2022-24756 Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 2… Bareos 19.2.12 / 20.0.6+ Fix from $1,9502022-03-15 HIGH 7.5 CVE-2022-0853 A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and l… Descision Manager No fix yet Fix from $1,9502022-03-11 MEDIUM 5.5 CVE-2022-26878 drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed). Linux Kernel 5.15.17 / 5.16.3+ Fix from $1,6002022-03-11 HIGH 7.5 CVE-2021-40047 There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability ma… Emui No fix yet Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2021-3744 A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cau… Linux Kernel 5.15+ Fix from $1,6002022-03-04 MEDIUM 5.5 CVE-2021-44961 A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exh… Libslic3r No fix yet Fix from $1,6002022-03-01 HIGH 7.5 CVE-2020-22844 A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests. Routeros Mitigation only Fix from $1,9502022-02-28 MEDIUM 6.5 CVE-2022-24599 In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak s… Debian Linux No fix yet Fix from $1,6002022-02-24 HIGH 7.5 CVE-2022-22336 IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resource… Sterling External Authentication Server Mitigation only Fix from $1,9502022-02-23 HIGH 7.5 CVE-2021-46082 Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to co… Tn 5916 Wv T Firmware after 3.1 Fix from $1,9502022-02-18 MEDIUM 5.5 CVE-2022-24959 An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c. Linux Kernel 5.16.5+ Fix from $1,6002022-02-11