Skip to content

CWE-401 · Denial of Service

Missing Release of Memory after Effective Lifetime

1,963CVEs
1exploited
0with a public check
8likely (EPSS 10%+)

1,963 CVEs with CWE-401 as their weakness

CVEs with CWE-401, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2023-26083In CISA KEVExploitedMemory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall…Arm · Mali Graphics Processing Unit (GPU) · CVSS 3.3 · 2023-04-063.31.2%2023-04-06
CVE-2020-13934An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a s…Apache · Apache Tomcat · 2020-07-14–64%2020-07-14
CVE-2016-6304Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) v…Openssl · Openssl · 2016-09-26–63%2016-09-26
CVE-2019-12265Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3…Windriver · Vxworks · 2019-08-09–60%2019-08-09
CVE-2001-0136Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly in…Proftpd · Proftpd · 2001-09-18–45%2001-09-18
CVE-2016-4232Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information…Adobe · Flash Player · 2016-07-13–36%2016-07-13
CVE-2001-0543Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.Microsoft · Windows 2000 · 2002-03-09–19%2002-03-09
CVE-2018-0891ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and…Microsoft Corporation · ChakraCore, Microsoft Edge, Internet Explorer · 2018-03-14–14%2018-03-14
CVE-2009-1378Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of se…Openssl · Openssl · 2009-05-19–13%2009-05-19
CVE-2007-2274The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the ori…Opera · Opera Browser · 2007-04-25–8.2%2007-04-25
CVE-2021-28651An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, th…Squid-Cache · Squid · 2021-05-27–7.4%2021-05-27
CVE-2022-20785ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022Cisco · Cisco AMP for Endpoints · CVSS 7.5 · 2022-05-047.57.1%2022-05-04
CVE-2019-19078A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (mem…Linux · Linux Kernel · 2019-11-18–6.6%2019-11-18
CVE-2019-8980A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vf…Linux · Linux Kernel · 2019-02-21–5.9%2019-02-21
CVE-2015-8567Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).Qemu · Qemu · 2017-04-13–5.6%2017-04-13
CVE-2022-47941An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions, aka…Linux · Linux Kernel · CVSS 7.5 · 2022-12-237.55.2%2022-12-23
CVE-2019-19052A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by…Linux · Linux Kernel · 2019-11-18–5.2%2019-11-18
CVE-2019-19050A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption…Linux · Linux Kernel · 2019-11-18–5.1%2019-11-18
CVE-2025-53020Apache HTTP Server: HTTP/2 DoS by Memory IncreaseApache Software Foundation · Apache HTTP Server · CVSS 7.5 · 2025-07-107.55.0%2025-07-10
CVE-2021-20108Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any…Zohocorp · Manage Engine Asset Explorer Agent · 2021-07-19–4.5%2021-07-19
CVE-2019-19074A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory cons…Linux · Linux Kernel · 2019-11-18–4.4%2019-11-18
CVE-2022-1012A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information l…Linux · Kernel · 2022-08-05–4.4%2022-08-05
CVE-2021-28652An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This all…Squid-Cache · Squid · 2021-05-27–4.3%2021-05-27
CVE-2019-19075A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption)…Linux · Linux Kernel · 2019-11-18–4.0%2019-11-18
CVE-2019-19044Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory cons…Linux · Linux Kernel · 2019-11-18–4.0%2019-11-18
CVE-2019-18813A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption)…Linux · Linux Kernel · 2019-11-07–3.9%2019-11-07
CVE-2023-32247Session setup memory exhaustion denial-of-service vulnerabilityLinux · kernel · CVSS 7.5 · 2023-07-247.53.9%2023-07-24
CVE-2019-15916An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.Linux · Linux Kernel · 2019-09-04–3.9%2019-09-04
CVE-2019-6128The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.Libtiff · Libtiff · 2019-01-11–3.9%2019-01-11
CVE-2019-19071A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory…Linux · Linux Kernel · 2019-11-18–3.8%2019-11-18
CVE-2018-17240There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network conf…Netwavepr · Indoor Ip Camera Firmware · 2022-06-10–3.8%2022-06-10
CVE-2022-41556A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by…Lighttpd · Lighttpd · 2022-10-06–3.8%2022-10-06
CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.Imagemagick · Imagemagick · 2019-02-05–3.8%2019-02-05
CVE-2019-19048A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memor…Linux · Linux Kernel · 2019-11-18–3.8%2019-11-18
CVE-2019-1000031A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following…article2pdf · article2pdf Wordpress plug-in · 2019-03-27–3.7%2019-03-27
CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.Imagemagick · Imagemagick · 2019-02-05–3.7%2019-02-05
CVE-2019-18812A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), a…Linux · Linux Kernel · 2019-11-07–3.7%2019-11-07
CVE-2004-0222Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by…Openbsd · Openbsd · 2004-03-25–3.6%2004-03-25
CVE-2019-19060A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consu…Linux · Linux Kernel · 2019-11-18–3.6%2019-11-18
CVE-2019-19049A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by…Linux · Linux Kernel · 2019-11-18–3.6%2019-11-18
CVE-2019-16995In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID…Linux · Linux Kernel · 2019-09-30–3.5%2019-09-30
CVE-2020-13152A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste…Kde · Amarok · 2020-05-20–3.5%2020-05-20
CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.Imagemagick · Imagemagick · 2019-02-05–3.5%2019-02-05
CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.Imagemagick · Imagemagick · 2019-02-05–3.5%2019-02-05
CVE-2019-19069A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption…Linux · Linux Kernel · 2019-11-18–3.5%2019-11-18
CVE-2019-19061A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory…Linux · Linux Kernel · 2019-11-18–3.4%2019-11-18
CVE-2019-18810A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a de…Linux · Linux Kernel · 2019-11-07–3.3%2019-11-07
CVE-2017-15094An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA k…PowerDNS · PowerDNS Recursor · 2018-01-23–3.3%2018-01-23
CVE-2019-19079A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service (memory consumption), aka CID-a2…Linux · Linux Kernel · 2019-11-18–3.3%2019-11-18
CVE-2022-38177Memory leak in ECDSA DNSSEC verification codeISC · BIND9 · CVSS 7.5 · 2022-09-217.53.3%2022-09-21

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in