In w32-io.c _gpgme_io_spawn a temporary file name "tmp_name" is created with "_gpgme_mkstemp" which allocates memory with gpgme_strconcat.

I do not think that this memory is ever release.