Weaknesses of type CWE-401

664 results

Vazamento de memória por falta de liberação

Ocorre quando o programa aloca memória (heap ou recursos) mas não a libera adequadamente após seu uso, deixando-a inacessível para reutilização. O memory leaker consome progressivamente mais RAM, degradando performance e podendo levar a negação de serviço, especialmente em aplicações de longa duração ou servidores.

Example

Um servidor web que cria um objeto para processar cada requisição mas esquece de chamar `free()` ou `delete` ao final. Depois de milhões de requisições, toda memória disponível está consumida por objetos orphans e o servidor para de responder.

How to mitigate

Use análise estática (static analyzers) ou ferramentas de profiling (valgrind, sanitizers do GCC/Clang) para detectar leaks em desenvolvimento. Em linguagens com garbage collection, garanta que objetos saiam de escopo corretamente; em C/C++, libere sempre o que alocou, ou prefira smart pointers (unique_ptr, shared_ptr) que liberam automaticamente.

CVE-2024-50197MEDIUMpinctrl: intel: platform: fix error path in device_for_each_child_node()EPSS 0.2%CVE-2022-49924MEDIUMnfc: fdp: Fix potential memory leak in fdp_nci_send()EPSS 0.2%CVE-2022-50372MEDIUMcifs: Fix memory leak when build ntlmssp negotiate blob failedEPSS 0.2%CVE-2023-53350MEDIUMaccel/qaic: Fix slicing memory leakEPSS 0.2%CVE-2024-50068MEDIUMmm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()EPSS 0.2%CVE-2023-21666HIGHImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsEPSS 0.2%CVE-2022-31222LOWDell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user coEPSS 0.2%CVE-2024-57872MEDIUMscsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()EPSS 0.2%CVE-2024-50190MEDIUMice: fix memleak in ice_init_tx_topology()EPSS 0.2%CVE-2024-50254MEDIUMbpf: Free dynamically allocated bits in bpf_iter_bits_destroy()EPSS 0.2%CVE-2026-38819MEDIUMMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memoEPSS 0.2%CVE-2024-56753MEDIUMdrm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 ModuleEPSS 0.2%CVE-2026-14697MEDIUMIPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of serviceEPSS 0.2%CVE-2022-23091MEDIUMMemory disclosure by stale virtual memory mappingEPSS 0.2%CVE-2022-29515MEDIUMMissing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privilegedEPSS 0.2%CVE-2026-33780HIGHJunos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldEPSS 0.2%CVE-2024-3860MEDIUMAn out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it woEPSS 0.2%CVE-2023-53008MEDIUMcifs: fix potential memory leaks in session setupEPSS 0.2%CVE-2023-53014MEDIUMdmaengine: tegra: Fix memory leak in terminate_all()EPSS 0.2%CVE-2022-50396MEDIUMnet: sched: fix memory leak in tcindex_set_parmsEPSS 0.2%