{"id":"CVE-2026-24828","summary":"Memory leak in is-Engine","details":"Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: before 3.3.4.","modified":"2026-08-12T16:24:53.758522Z","published":"2026-01-27T09:14:16.784Z","database_specific":{"cna_assigner":"GovTech CSG","cwe_ids":["CWE-401"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24828.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24828.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24828"},{"type":"FIX","url":"https://github.com/Is-Daouda/is-Engine/pull/6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/is-daouda/is-engine","events":[{"introduced":"0"},{"fixed":"0b462ae65121e38d9371a1df3ea92bf661ccf873"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"0"},{"fixed":"3.3.4"}]}}],"versions":["v3.3"],"database_specific":{"vanir_signatures_modified":"2026-08-12T16:24:53Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"222258071593424496867856003996005172363","length":4366},"id":"CVE-2026-24828-787a8def","signature_type":"Function","signature_version":"v1","source":"https://github.com/is-daouda/is-engine/commit/0b462ae65121e38d9371a1df3ea92bf661ccf873","target":{"file":"app/src/main/cpp/isEngine/system/islibconnect/isEngineSDLWrapper.cpp","function":"RenderWindow::draw"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["299254851631917845531838399254703772306","200159679231350060183777010405296815208","119359396319586779648319252783859558286","230819370053314853631577060443997165385","49475620582203743008857649569695268771","220770218971611441705647313905918946201","128992534731407571561456798498169763829","264288974200374199698674252218396090246","123625958879887630248583115256171456146","75717064363705530604190558689933827629","68440542906451869874099259734613553733","331027446240752829234203059446940889215","226842879024403276542177320470444313204","269369702618502771850247541310964271106","91966767843801476519301956747142752449","5506966502274225651659253541604632393","1723853343585066937836102169340086475","278674160766898112935208049004938865494","196044713932727604258245819067272356248","25140478487914166565462502456676274234","131173636512559064590784388343441874077","143420035141437573089063647965627491133","196929905966464976292332702699270980709","134455967568908345754109663629503823184","263242604029842987514438661767499489779","154617833927498945854941800237615452527","291470415805335205817223131192494761492","152944352337334953604961693783541338181","69750013521812275342396557672765388037","21797800375965966205236361107487727695","125443702371011881494694886009506998126"]},"id":"CVE-2026-24828-da9c3f70","signature_type":"Line","signature_version":"v1","source":"https://github.com/is-daouda/is-engine/commit/0b462ae65121e38d9371a1df3ea92bf661ccf873","target":{"file":"app/src/main/cpp/isEngine/system/islibconnect/isEngineSDLWrapper.cpp"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24828.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}