Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2025-2122LOWThinkware Car Dashcam F800 Pro Connection denial of serviceEPSS 0.8%CVE-2026-1739MEDIUMFree5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereferenceEPSS 0.8%CVE-2026-2108MEDIUMjsbroks COCO Annotator Endpoint long_task denial of serviceEPSS 0.8%CVE-2025-15529MEDIUMOpen5GS s5c-handler.c sgwc_s5c_handle_create_session_response denial of serviceEPSS 0.8%CVE-2024-57623HIGHAn issue in the HEAP_malloc component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statemeEPSS 0.8%CVE-2022-4246MEDIUMKakao PotPlayer MID File denial of serviceEPSS 0.7%CVE-2025-15539MEDIUMOpen5GS sgwc s11-handler.c sgwc_s11_handle_downlink_data_notification_ack denial of serviceEPSS 0.7%CVE-2026-82669MEDIUMklaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of serviceEPSS 0.7%CVE-2026-1682MEDIUMFree5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereferenceEPSS 0.7%CVE-2021-4280MEDIUMstyler_praat_scripts Slash file_segmenter.praat denial of serviceEPSS 0.7%CVE-2022-39368HIGHCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of recordsEPSS 0.7%CVE-2025-0704MEDIUMJoeyBling bootplus QrCodeController.java qrCode resource consumptionEPSS 0.7%CVE-2024-57654HIGHAn issue in the qst_vec_get_int64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via EPSS 0.7%CVE-2024-57659HIGHAn issue in the sqlg_parallel_ts_seq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) vEPSS 0.7%CVE-2026-1522MEDIUMOpen5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of serviceEPSS 0.7%CVE-2024-2363MEDIUMAOL AIM Triton Invite denial of serviceEPSS 0.7%CVE-2026-90784MEDIUMDvidelabs flatcc semantics.c fb_clear_parser memory leakEPSS 0.7%CVE-2026-17500MEDIUMggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferenceEPSS 0.7%CVE-2026-91855MEDIUMOpen5GS PFCP Message handler.c denial of serviceEPSS 0.7%CVE-2026-17501MEDIUMggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionEPSS 0.7%