CWE-762 Mismatched Memory Management Routines
variantThe product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (19)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-48755US | critical9.8 | — | ||
In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type). | ||||
| CVE-2025-47737US | critical9.8 | — | ||
lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero. | ||||
| CVE-2023-41056US | high8.1 | — | ||
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and pote… | ||||
| CVE-2024-32503US | high7.8 | — | ||
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. Th… | ||||
| CVE-2026-102025US | high7.5 | — | ||
A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network… | ||||
| CVE-2025-49080US | high7.5 | — | ||
There is a memory management vulnerability in Absolute
Secure Access server versions 9.0 to 13.54. Attackers with network access to
the server can cause a Denial of Service by send… | ||||
| CVE-2024-2955US | high7.5 | — | ||
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file | ||||
| CVE-2023-45510US | high7.5 | — | ||
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch (operator new [] vs operator delete) error. | ||||
| CVE-2023-40791US | medium6.3 | — | ||
extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page. | ||||
| CVE-2024-4853US | medium5.5 | — | ||
Memory handling issue in editcap could cause denial of service via crafted capture file | ||||
| CVE-2024-26783US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
With numa balancing on, when a numa syste… | ||||
| CVE-2023-3648US | medium5.5 | — | ||
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file | ||||
| CVE-2026-90104US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
NFSv4.1: zero referring call lists before decoding
decode_cb_sequence_args() allocates csa_rclists with kmallo… | ||||
| CVE-2026-43622US | — | — | ||
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() dea… | ||||
| CVE-2025-48431US | — | — | ||
Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade t… | ||||
| CVE-2025-12727US | — | — | ||
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu… | ||||
| CVE-2025-11015US | — | — | ||
A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipu… | ||||
| CVE-2025-20189US | — | — | ||
A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could al… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan