#cwe-401

共收录 232 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during enco...

CVE-2026-109261

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attacke...

CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation

CVE-2026-109278

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fail

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick before 7.1.2-32 Memory Leak via -process Option

CVE-2026-109270

ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause u

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder

CVE-2026-109263

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder

CVE-2026-109262

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fail

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder

CVE-2026-109261

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder

CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LL_PHY_UPDATE_IND so that...

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Para...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the rec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node (ctx->node_ref.rx, marked NODE_RX_TYPE_RETAIN...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remot...

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-05 发布INFO

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

CVE-2026-104874

## Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-05 发布INFO

compression vulnerable to Denial of Service via memory leak on premature response close

CVE-2026-87776

### Impact A vulnerability in compression `< 1.8.2` allows an attacker to trigger a Denial of Service (DoS) by disconne

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items(), in multidict_i...

CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view refle

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to u...

CVE-2026-94652

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects A...

CVE-2026-93926

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's recei...

CVE-2026-102762

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet,

历史摘要 · 未重新核验 · NVD