Weaknesses of type CWE-401

750 results

Vazamento de memória por falta de liberação

Ocorre quando o programa aloca memória (heap ou recursos) mas não a libera adequadamente após seu uso, deixando-a inacessível para reutilização. O memory leaker consome progressivamente mais RAM, degradando performance e podendo levar a negação de serviço, especialmente em aplicações de longa duração ou servidores.

Example

Um servidor web que cria um objeto para processar cada requisição mas esquece de chamar `free()` ou `delete` ao final. Depois de milhões de requisições, toda memória disponível está consumida por objetos orphans e o servidor para de responder.

How to mitigate

Use análise estática (static analyzers) ou ferramentas de profiling (valgrind, sanitizers do GCC/Clang) para detectar leaks em desenvolvimento. Em linguagens com garbage collection, garanta que objetos saiam de escopo corretamente; em C/C++, libere sempre o que alocou, ou prefira smart pointers (unique_ptr, shared_ptr) que liberam automaticamente.

CVE-2026-114613HIGHMessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failureEPSS 0.5%CVE-2026-22025MEDIUMCryptoLib Memory Leak on HTTP Error Response in KMC ClientEPSS 0.5%CVE-2025-1816MEDIUMFFmpeg IAMF File iamf_parse.c audio_element_obu memory leakEPSS 0.5%CVE-2026-63128HIGHRMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-serviceEPSS 0.5%CVE-2021-3744—A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackeEPSS 0.5%CVE-2026-52981HIGHneigh: let neigh_xmit take skb ownershipEPSS 0.5%CVE-2026-73565MEDIUM@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshakeEPSS 0.5%CVE-2026-53397HIGHnfsd: fix posix_acl leak on SETACL decode failureEPSS 0.5%CVE-2026-16318MEDIUMQUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tlsEPSS 0.5%CVE-2026-54876HIGHClient-Side Memory Leak in OCSP Response CheckingEPSS 0.5%CVE-2026-47667HIGHCImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze HeaderEPSS 0.5%CVE-2024-4435MEDIUMBTreeMap memory leak when deallocating nodes with overflowsEPSS 0.5%CVE-2023-4513MEDIUMMissing Release of Memory after Effective Lifetime in WiresharkEPSS 0.5%CVE-2026-30873LOWOpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokensEPSS 0.5%CVE-2026-67183HIGHTinyWeb 0.0.8 Memory Leak DoS via HTTP Request HandlingEPSS 0.5%CVE-2026-110685CRITICALCpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tagEPSS 0.5%CVE-2026-32874HIGHUltraJSON has a Memory Leak parsing large integers allows DoSEPSS 0.5%CVE-2026-52734MEDIUMZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retentionEPSS 0.5%CVE-2025-53537HIGHLibHTP's memory leak with lzma can lead to resource starvationEPSS 0.5%CVE-2026-18076MEDIUMIBM i is Affected By Multiple Vulnerabilities in Debug ServerEPSS 0.5%