CWE-226.

MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data

• MongoDB Node.js Driver
• CWE-226

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

• Memory corruption
• CWE-226

>=11.2.1, <13.0.0 · fixed in 13.0.0

pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)

• pgjdbc
• Information disclosure
• CWE-226

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

• CWE-226

>=4.0.0, <4.1.2 · fixed in 4.1.2

devalue: `stringify`/`uneval` serialize shared memory

• Information disclosure
• CWE-226

>=5.1.0, <5.9.3 · fixed in 5.9.3

ASUS Armoury Crate: Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver…

• ASUS Armoury Crate
• CWE-226

OpenStack Ironic: In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run…

• OpenStack Ironic
• CWE-226

libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

• strukturag libheif
• Information disclosure
• Memory corruption

Resource allocation without limits in ASUS System Control Interface v3 and others

• ASUS System Control Interface v3
• ASUS System Control Interface
• Denial of service
• CWE-226

pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap

• mcdope pam_usb
• CWE-14
• CWE-226

silex technology, Inc. SD-330AC: SD-330AC and AMC Manager provided by silex technology…

• silex technology, Inc. SD-330AC
• silex technology, Inc. AMC Manager
• CWE-226

Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

• Authentication bypass
• CWE-226

>=12.1.0, <12.1.8 || >=12.0.0, <12.0.34 · fixed in 12.1.8, 12.0.34

Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

• CWE-226

>=12.1.0, <12.1.7 || >=12.0.0, <12.0.33 || >=11.0.0, <11.0.28 || >=10.0.0, <10.0.28 || >=9.4.0, <9.4.60 · fixed in 12.1.7, 12.0.33, 11.0.28, 10.0.28, 9.4.60

Semtech LR11xx Encrypted Firmware Disclosure

• Semtech LR1110
• Semtech LR1120
• CWE-226

AnyBurn 4.3 x86 Denial of Service via Image Conversion

• AnyBurn x86
• CWE-226

OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding

• Broken access control
• CWE-226

<=2026.3.24 · no fixed version yet

Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()

• CWE-226

<7.0.0 · fixed in 7.0.0

WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service

• WinAVI iPod/3GP/MP4/PSP Converter
• CWE-226

Ease Audio Converter 5.30 Denial of Service via Audio Cutter

• Audiotool Ease Audio Converter
• CWE-226

MediaMonkey 4.1.23 Denial of Service via Malformed URL

• MediaMonkey
• CWE-226

PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation

• Uvnc PCHelpWareV2
• CWE-226

Lyric Video Creator 2.1 Denial of Service via MP3 File

• Lyricvideocreator Lyric Video Creator
• CWE-226

CEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image

• Cewe-Photoworld CEWE PHOTO IMPORTER
• CWE-226

Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows

• IBM DB2 Merge Backup for Linux, UNIX and Windows
• CWE-226

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareabili…

• Arm Neoverse-N2
• Arm Neoverse-V3AE
• CWE-226

NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…

• NVIDIA DGX Spark
• CWE-226

NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…

• NVIDIA DGX Spark
• CWE-226

NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…

• NVIDIA DGX Spark
• CWE-226

Intel(R) NPU Drivers for Windows: Sensitive information uncleared in resource before release for reuse for some Intel(R)…

• Intel(R) NPU Drivers for Windows
• CWE-226

Untargeted information leak in Bolt protocol handshake

• neo4j Enterprise Edition
• neo4j Community Edition
• CWE-226

Lack of buffer clearing before reuse may result in incorrect system behavior.

• Honeywell C300 PCNT02
• Honeywell C300 PCNT05
• CWE-226

wire-webapp has no database deletion on client logout

• wireapp wire-webapp
• CWE-226

Intel(R) TDX Seamldr module software: Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr…

• Intel(R) TDX Seamldr module software
• CWE-226

CMSE secure state may leak from stack to floating-point registers

• Arm Ltd Arm Compiler for Embedded
• Arm Ltd Arm Compiler for Embedded FuSa 6.16LTS
• CWE-226

Moodle HTTP authorization header is preserved between "emulated redirects"

• CWE-226
• CWE-459

<4.1.11 || >=4.2.0-beta, <4.2.8 || >=4.3.0-beta, <4.3.5 || >=4.4.0-beta, <4.4.1 · fixed in 4.1.11, 4.2.8, 4.3.5, 4.4.1

SixLabors.ImageSharp vulnerable to data leakage

• CWE-212
• CWE-226

<2.1.8 || >=3.0.0, <3.1.4 · fixed in 2.1.8, 3.1.4

Improper privilege management in AppsAnywhere Client

• AppsAnywhere Client
• Privilege escalation
• CWE-226

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne.

• Kernel
• CWE-226

Kernel: A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of…

• Kernel
• CWE-226

Bug in pooling instance allocator

• CWE-226

>=0.0.0-0, <1.0.2 || >=2.0.0, <2.0.2 · fixed in 1.0.2, 2.0.2

Duplicate Advisory: `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s

• CWE-226

<1.1.1 · fixed in 1.1.1

Buffer not correctly recycled in Gzip Request inflation

• CWE-226

>=9.4.0, <9.4.35.v20201120 · fixed in 9.4.35.v20201120

Information Disclosure in GlobalProtect Agent

• Palo Alto Networks GlobalProtect Agent
• CWE-226

Node.js: In all versions of Node.js 10 prior to 10.9.0…

• Node.js
• CWE-226