Improper Clearing of Heap Memory Before Release
CWE-244
The product uses realloc() to resize buffers that contain sensitive information.
We track 10 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8. 1 has been exploited in real attacks.
Latest Improper Clearing of Heap Memory Before Release vulnerabilities
- 8.6 High severity
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Exploited
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unex
- 7.5 High severity
RUGGEDCOM CROSSBOW Station Access Controller…: Improper Clearing of Heap Memory Before Release
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Improper Clearing of Heap Memory Before Release
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an
- 7.5 High severity
Concert: Improper Clearing of Heap Memory Before Release
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5 High severity
Concert: Improper Clearing of Heap Memory Before Release
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5 High severity
Concert: Improper Clearing of Heap Memory Before Release
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.5 High severity
Storage Virtualize: Improper Clearing of Heap Memory Before Release
IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
- 7.5 High severity
Concert Software: Improper Removal of Sensitive Information Before Storage or Transfer
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
- 7.3 High severity
ZLT W51: Improper Clearing of Heap Memory Before Release
A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release. The attack ma
- 8.2 High severity
Libming: Improper Clearing of Heap Memory Before Release
A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.