cve.bz

CWE-772: Missing Release of Resource after Effective Lifetime, page 8

Filter

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

What the weakness is: CWE-772 at MITRE

Ask an AI about CWE-772

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-772: Missing Release of Resource after Effective Lifetime and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/772.html and https://cve.bz/cve/cwe/772?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2017-15032EPSS 1.5%

    ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

  2. 8.6CVE-2017-12245EPSS 1.6%

    A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detection Engine SSL Decryption Memory Consump…

  3. 7.5CVE-2017-0818EPSS 1.0%

    A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671.

  4. 7.5CVE-2017-0813EPSS 0.9%

    A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046.

  5. 7.5CVE-2017-14495ExploitEPSS 85%

    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

  6. 5.9CVE-2017-14970EPSS 1.2%

    In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an Open…

  7. 5.5CVE-2017-14930EPSS 1.4%

    Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.

  8. 6.5CVE-2017-14684EPSS 1.2%

    In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a c…

  9. 7.0CVE-2017-8280EPSS 0.3%

    In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow durin…

  10. 6.5CVE-2017-14533EPSS 1.8%

    ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.

  11. 5.5CVE-2017-14431EPSS 0.3%

    Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, a…

  12. 6.5CVE-2017-14343EPSS 1.4%

    ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.

  13. 6.5CVE-2017-14326EPSS 1.1%

    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.

  14. 6.5CVE-2017-14325EPSS 2.3%

    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted f…

  15. 6.5CVE-2017-14324EPSS 1.5%

    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.

  16. 6.5CVE-2017-14139EPSS 1.3%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.

  17. 9.8CVE-2017-14138EPSS 2.1%

    ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

  18. 7.5CVE-2017-13748EPSS 4.7%

    There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.

  19. 6.5CVE-2017-13736EPSS 1.8%

    There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.

  20. 6.5CVE-2017-13648EPSS 1.4%

    In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.

  21. 8.8CVE-2017-13146EPSS 1.3%

    In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.

  22. 6.5CVE-2017-13141EPSS 1.2%

    In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.

  23. 6.5CVE-2017-13131EPSS 1.5%

    In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a craft…

  24. 6.5CVE-2017-13066EPSS 1.4%

    GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.

  25. 6.5CVE-2017-13062EPSS 1.5%

    In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.

  26. 6.5CVE-2017-13060EPSS 1.2%

    In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.

  27. 6.5CVE-2017-13059EPSS 1.5%

    In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.

  28. 6.5CVE-2017-13058EPSS 1.5%

    In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.

  29. 7.5CVE-2017-12962EPSS 1.2%

    There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack.

  30. 5.5CVE-2017-0726EPSS 0.3%

    A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36389123.

  31. 7.8CVE-2017-0719EPSS 1.6%

    A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673.

  32. 6.5CVE-2017-12676EPSS 0.9%

    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.

  33. 6.5CVE-2017-12675EPSS 0.9%

    In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.

  34. 6.5CVE-2017-12673EPSS 1.1%

    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service.

  35. 6.5CVE-2017-12672EPSS 0.9%

    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.

  36. 8.8CVE-2017-12669EPSS 1.5%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c.

  37. 8.8CVE-2017-12668EPSS 1.5%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

  38. 8.8CVE-2017-12667EPSS 1.4%

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.

  39. 8.8CVE-2017-12666EPSS 2.2%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.

  40. 8.8CVE-2017-12665EPSS 1.7%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.

  41. 8.8CVE-2017-12664EPSS 1.7%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.

  42. 8.8CVE-2017-12663EPSS 1.7%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c.

  43. 8.8CVE-2017-12662EPSS 2.2%

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c.

  44. 7.5CVE-2015-7701EPSS 6.5%

    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

  45. 6.5CVE-2017-12654EPSS 1.3%

    The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file.

  46. 8.8CVE-2017-12644EPSS 2.4%

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.

  47. 8.8CVE-2017-12642EPSS 1.4%

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.

  48. 8.8CVE-2017-12641EPSS 1.4%

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.

  49. 6.5CVE-2017-12566EPSS 1.2%

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c.

  50. 6.5CVE-2017-12565EPSS 1.2%

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.