Weaknesses of type CWE-401

750 results

Vazamento de memória por falta de liberação

Ocorre quando o programa aloca memória (heap ou recursos) mas não a libera adequadamente após seu uso, deixando-a inacessível para reutilização. O memory leaker consome progressivamente mais RAM, degradando performance e podendo levar a negação de serviço, especialmente em aplicações de longa duração ou servidores.

Example

Um servidor web que cria um objeto para processar cada requisição mas esquece de chamar `free()` ou `delete` ao final. Depois de milhões de requisições, toda memória disponível está consumida por objetos orphans e o servidor para de responder.

How to mitigate

Use análise estática (static analyzers) ou ferramentas de profiling (valgrind, sanitizers do GCC/Clang) para detectar leaks em desenvolvimento. Em linguagens com garbage collection, garanta que objetos saiam de escopo corretamente; em C/C++, libere sempre o que alocou, ou prefira smart pointers (unique_ptr, shared_ptr) que liberam automaticamente.

CVE-2022-22204MEDIUMJunos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP trafficEPSS 0.7%CVE-2023-33718HIGHmp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cppEPSS 0.7%CVE-2023-5954MEDIUMVault Requests Triggering Policy Checks May Lead To Unbounded Memory ConsumptionEPSS 0.7%CVE-2022-43037MEDIUMAn issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File::ParseStream in /Core/Ap4File.cpp.EPSS 0.7%CVE-2026-18212HIGHKeycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib stateEPSS 0.7%CVE-2022-1515—A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially EPSS 0.7%CVE-2022-4132MEDIUMMemory leak on tls connectionsEPSS 0.7%CVE-2024-7884HIGHMemory leak when calling a canister method via `ic_cdk::call`EPSS 0.7%CVE-2026-63446HIGHSuricata app-layer: passed flows can retain transactions, causing resource exhaustionEPSS 0.7%CVE-2026-86040HIGHlibp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoSEPSS 0.7%CVE-2023-5349MEDIUMDraw while calling getdrawinfo()EPSS 0.7%CVE-2026-56819HIGHNetty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)EPSS 0.7%CVE-2026-58175HIGHApache Traffic Server: HostDB SRV handling leaks memoryEPSS 0.7%CVE-2023-22417HIGHJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crashEPSS 0.7%CVE-2024-25450HIGHimlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().EPSS 0.7%CVE-2023-40534HIGHBIG-IP HTTP/2 vulnerabilityEPSS 0.7%CVE-2023-28982HIGHJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occurEPSS 0.6%CVE-2026-35505HIGHOFFIS DCMTK Toolkit Missing Release of Memory after Effective LifetimeEPSS 0.6%CVE-2026-69405MEDIUMWindows DHCP Server Denial of Service VulnerabilityEPSS 0.6%CVE-2026-50254HIGHOFFIS DCMTK Toolkit Missing Release of Memory after Effective LifetimeEPSS 0.6%