CWE-401: Memory leak

2,028 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

Critical 13High 462Medium 1,470Low 82Not scored 1

CVEs per yearBy the year they were published

CVE-2023-26083
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from…
Product not named
ExploitedLow3.3
CVE-2018-0158
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
Cisco IOS and IOS XE
ExploitedHigh8.6

CVE-2026-112336
Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder
wazuh · wazuh
High7.1
CVE-2026-108949
Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM
Apache Software Foundation · Apache ActiveMQ
Medium6.5
CVE-2026-87044
Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service
zephyrproject · zephyr
Medium6.5
CVE-2026-120678
MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)
MongoDB · C Driver
High8.7
CVE-2026-121512
Missing Release of Memory after Effective Lifetime in µD3TN
D3TN GmbH · µD3TN
High7.5
CVE-2026-120440
QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
quickjs-ng · QuickJS-NG
Medium6.9
CVE-2026-119286
GraphQL-core: Denial of service via memory leak in aborted validations
graphql-python · graphql-core
High7.5
CVE-2026-116159
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
ImageMagick · ImageMagick
Medium4.8
CVE-2026-116158
ImageMagick before 7.1.2-33 Memory Leak in magick compare
ImageMagick · ImageMagick
Low2.0
CVE-2026-116157
ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading
ImageMagick · ImageMagick
Medium4.8