A memory leak occurs in Wind River VxWorks 7 versions 24.03 to 26.03 when the system processes specific service routines under certain non‑default configuration states. The leak causes the system to terminate operations before releasing allocated memory pools, leading to resource exhaustion and potential service disruption.

Wind River VxWorks 7, versions 24.03, 25.03 and 26.03, which are affected by the memory leak. Versions released after 26.03 are not impacted.

The CVSS score of 5.5 indicates a moderate severity vulnerability. Because the vulnerability requires specific internal configuration states and service routines, the likelihood of exploitation in typical environments is limited. The EPSS score is not available and the vulnerability is not listed in CISA KEV, further suggesting a lower exploitation probability.