Weaknesses of type CWE-401

750 results

Vazamento de memória por falta de liberação

Ocorre quando o programa aloca memória (heap ou recursos) mas não a libera adequadamente após seu uso, deixando-a inacessível para reutilização. O memory leaker consome progressivamente mais RAM, degradando performance e podendo levar a negação de serviço, especialmente em aplicações de longa duração ou servidores.

Example

Um servidor web que cria um objeto para processar cada requisição mas esquece de chamar `free()` ou `delete` ao final. Depois de milhões de requisições, toda memória disponível está consumida por objetos orphans e o servidor para de responder.

How to mitigate

Use análise estática (static analyzers) ou ferramentas de profiling (valgrind, sanitizers do GCC/Clang) para detectar leaks em desenvolvimento. Em linguagens com garbage collection, garanta que objetos saiam de escopo corretamente; em C/C++, libere sempre o que alocou, ou prefira smart pointers (unique_ptr, shared_ptr) que liberam automaticamente.

CVE-2026-108949MEDIUMApache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOMEPSS 0.5%CVE-2023-31975LOWyasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties disEPSS 0.5%CVE-2024-39549HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leakEPSS 0.5%CVE-2025-25469HIGHFFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.EPSS 0.5%CVE-2026-47888HIGHSpring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerEPSS 0.5%CVE-2024-5294MEDIUMD-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service VulnerabilityEPSS 0.5%CVE-2025-61974HIGHBIG-IP SSL/TLS vulnerabilityEPSS 0.5%CVE-2026-56368MEDIUMImageMagick - Memory Leak in Raw Pixel Data CodersEPSS 0.5%CVE-2026-76489MEDIUMMultiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service VulnerabilityEPSS 0.5%CVE-2026-15892MEDIUMHeap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of serviceEPSS 0.5%CVE-2024-50170HIGHnet: bcmasp: fix potential memory leak in bcmasp_xmit()EPSS 0.5%CVE-2026-110684HIGHCpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringifyEPSS 0.5%CVE-2025-21091HIGHBIG-IP SNMP vulnerabilityEPSS 0.5%CVE-2026-121512HIGHMissing Release of Memory after Effective Lifetime in µD3TNEPSS 0.4%CVE-2026-104874MEDIUMMultidict: Reference leak in CIMultiDict/MultiDict items-view union and subtractionEPSS 0.4%CVE-2026-63448MEDIUMSuricata smb: some SMB flows can cause resource exhaustionEPSS 0.4%CVE-2026-109262MEDIUMImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG EncoderEPSS 0.4%CVE-2024-7708HIGHFor requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case forEPSS 0.4%CVE-2026-56371MEDIUMImageMagick - Memory Leak in TXT File Processing via Texture AttributeEPSS 0.4%CVE-2026-48987MEDIUMpyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerEPSS 0.4%