CWE-244: Improper Clearing of Heap Memory Before Release (Heap Inspection)
Filter
The product uses realloc() to resize buffers that contain sensitive information.
What the weakness is: CWE-244 at MITRE. All weaknesses
Ask an AI about CWE-244
Show the prompt
Explain CWE-244: Improper Clearing of Heap Memory Before Release and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/244.html and https://cve.bz/cve/cwe/244?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.7CVE-2026-1510EPSS 0.1%
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.
- 8.6CVE-2026-20349KEVEPSS 1.0%
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the …
- 6.9CVE-2026-48025EPSS 0.5%
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master k…
- 7.5CVE-2025-70873EPSS 0.5%
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
- 8.6CVE-2026-20039EPSS 0.4%
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service …
- 5.9CVE-2025-33101EPSS 0.2%
IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory.
- 7.5CVE-2025-1722EPSS 0.4%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5CVE-2025-1719EPSS 0.4%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5CVE-2025-1721EPSS 0.3%
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5CVE-2025-36118EPSS 0.4%
IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
- 6.5CVE-2025-45663EPSS 0.4%
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
- 5.5CVE-2025-36083EPSS 0.1%
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
- 7.5CVE-2025-1759EPSS 0.4%
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 5.5CVE-2025-33013EPSS 0.2%
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user d…
- 6.9CVE-2025-5105EPSS 0.5%
A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before r…
- 8.2CVE-2025-26305EPSS 0.4%
A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
- 8.2CVE-2025-26304EPSS 0.4%
A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.
- 4.0CVE-2023-20070EPSS 0.7%
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to …
- 5.4CVE-2023-20031EPSS 0.4%
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart…
- 4.0CVE-2023-20177EPSS 0.7%
A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detection engine could allow an unauthenticate…
- 5.8CVE-2022-20943EPSS 1.1%
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of…
- 6.5CVE-2022-20922EPSS 0.9%
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of…