Vulnerability record · CVE-2026-35505 · published 30 June 2026

CVE-2026-35505: Memory leak vulnerability

An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.

8.7 CVSS 4.0 High EPSS 0.65% · top 51.1% CWE-401 · Memory leak Deferred

8.7CVSS 4.0 base score

0.65%EPSS exploitation probability, 30 days

NoNot in CISA KEV

0Affected product versions listed by NVD

3References

1 Jul 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

References

Link	Tags
https://github.com/DCMTK/dcmtk/releases/tag/latest
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-181-01.json
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01

Track CVE-2026-35505 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

3.3CVE-2023-26083Arm Mali GPU Kernel Driver memory leak exposes kernel metadataThe Arm Mali GPU kernel driver has a memory leak (CWE-401) across Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, and Avalon r41p0-r42p0…KEVEPSS 1.2%analysed6 Apr 2023 8.6CVE-2018-0158Cisco IOS and IOS XE IKEv2 packet handling memory leak DoSCisco IOS and IOS XE mishandle certain IKEv2 packets, causing improper input validation that leaks memory. Repeated crafted packets drive continuous …KEVEPSS 7.2%analysed28 Mar 2018

Source: NIST National Vulnerability Database (record CVE-2026-35505), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.