Vulnerability record · CVE-2026-24828 · published 27 January 2026

CVE-2026-24828: Memory leak vulnerability

Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: before 3.3.4.

7.5 CVSS 3.1 High EPSS 0.31% · top 79.1% CWE-401 · Memory leak Deferred

7.5CVSS 3.1 base score

0.31%EPSS exploitation probability, 30 days

NoNot in CISA KEV

0Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: before 3.3.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Link	Tags
https://github.com/Is-Daouda/is-Engine/pull/6

Track CVE-2026-24828 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

3.3CVE-2023-26083Arm Mali GPU Kernel Driver memory leak exposes kernel metadataThe Arm Mali GPU kernel driver has a memory leak (CWE-401) across Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, and Avalon r41p0-r42p0…KEVEPSS 1.2%analysed6 Apr 2023 8.6CVE-2018-0158Cisco IOS and IOS XE IKEv2 packet handling memory leak DoSCisco IOS and IOS XE mishandle certain IKEv2 packets, causing improper input validation that leaks memory. Repeated crafted packets drive continuous …KEVEPSS 7.2%analysed28 Mar 2018

Source: NIST National Vulnerability Database (record CVE-2026-24828), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.