CWE-244: Heap Inspection
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.
17 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- CVE-2026-20039 — Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability
- CVE-2025-5105 — TOZED ZLT W51 Service Port 7777 heap inspection
- CVE-2025-36118 — IBM Storage Virtualize Information Disclosure
- CVE-2025-36083 — Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-33013 — IBM MQ Operator information disclosure
- CVE-2025-33101 — Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-1759 — IBM Concert Software information disclosure
- CVE-2025-1722 — Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-1721 — BM Concert Software Improper Clearing of Heap Memory Before Release.
- CVE-2025-1719 — Multiple Vulnerabilities in IBM Concert Software
- CVE-2026-48025 — nebula-mesh: Decrypted CA private key persists in heap after signing
Recently published
- CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- CVE-2026-48025 — nebula-mesh: Decrypted CA private key persists in heap after signing
- CVE-2026-20039 — Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability
- CVE-2025-33101 — Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-1722 — Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-1719 — Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-1721 — BM Concert Software Improper Clearing of Heap Memory Before Release.
- CVE-2025-36118 — IBM Storage Virtualize Information Disclosure
- CVE-2025-36083 — Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-1759 — IBM Concert Software information disclosure
- CVE-2025-33013 — IBM MQ Operator information disclosure
- CVE-2025-5105 — TOZED ZLT W51 Service Port 7777 heap inspection