CWE-762: Mismatched Memory Management Routines
The product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.
10 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-20189 — A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Ser
- CVE-2026-43622 — llama.cpp b1886–b7445 Double Free via llama-android.cpp
- CVE-2025-48431 — Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
- CVE-2025-11015 — OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines
- CVE-2024-4853 — Mismatched Memory Management Routines in editcap
- CVE-2025-48755 — In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).
- CVE-2025-47737 — lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.
Recently published
- CVE-2026-43622 — llama.cpp b1886–b7445 Double Free via llama-android.cpp
- CVE-2025-48431 — Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
- CVE-2025-11015 — OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines
- CVE-2025-48755 — In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).
- CVE-2025-47737 — lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.
- CVE-2025-20189 — A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Ser
- CVE-2024-4853 — Mismatched Memory Management Routines in editcap
More specific weaknesses
- CWE-590 — Free of Memory not on the Heap