Variant weakness
Draft
CWE-401: Missing Release of Memory after Effective Lifetime
Also known as: Memory Leak
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Last updated
563
Recorded CVEs
With this primary weakness
1
KEVs
In the CISA KEV catalog
Medium
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
CWE-401 (Missing Release of Memory after Effective Lifetime) is a variant-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.