CWE-401Missing Release of Memory after Effective Lifetime

Description

Common consequences· 2

• Availability — DoS: Crash, Exit, or Restart, DoS: Instability, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
  Most memory leaks result in general product reliability problems, but if an attacker can intentionally trigger a memory leak, the attacker might be able to launch a denial of service attack (by crashing or hanging the program) or take advantage of other unexpected program behavior resulting from a low memory condition.
• Other — Reduce Performance

Potential mitigations· 3

• [Implementation]
• [Architecture and Design]Use an abstraction library to abstract away risky APIs. Not a complete solution.
• [Architecture and Design, Build and Compilation]Consider using the Boehm-Demers-Weiser garbage collector (bdwgc), which can help avoid leaks.

(incoming)5

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.