CVE-2021-47655

MEDIUM Year: 2021
CVSS v3 Score
5.5
Medium
Weakness Type
CWE-401
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: media: venus: vdec: fixed possible memory leak issue The venus_helper_alloc_dpb_bufs() implementation allows an early return on an error path when checking the id from ida_alloc_min() which would not release the earlier buffer allocation. Move the direct kfree() from the error checking of dma_alloc_attrs() to the common fail path to ensure that allocations are released on all error paths in this function. Addresses-Coverity: 1494120 ("Resource leak")

Related Vulnerabilities

CVE-2010-2942

MEDIUM
CVSS:5.5(Medium)

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which all...

CWE-4012010

CVE-2017-9060

MEDIUM
CVSS:5.5(Medium)

Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large num...

CWE-4012017

CVE-2017-9373

MEDIUM
CVSS:5.5(Medium)

Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugg...

CWE-4012017

CVE-2017-9374

MEDIUM
CVSS:5.5(Medium)

Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugg...

CWE-4012017

CVE-2019-10649

MEDIUM
CVSS:5.5(Medium)

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file.

CWE-4012019

CVE-2019-11463

MEDIUM
CVSS:5.5(Medium)

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a H...

CWE-4012019