CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Impactr finds and proves whether CWE-401 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.