Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2025-8805MEDIUMOpen5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of serviceEPSS 0.7%CVE-2024-57623HIGHAn issue in the HEAP_malloc component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statemeEPSS 0.7%CVE-2024-2363MEDIUMAOL AIM Triton Invite denial of serviceEPSS 0.7%CVE-2026-2108MEDIUMjsbroks COCO Annotator Endpoint long_task denial of serviceEPSS 0.7%CVE-2025-4533MEDIUMJeecgBoot Document Library Upload zip unzipFile resource consumptionEPSS 0.7%CVE-2025-14747MEDIUMNingyuanda TC155 RTSP Service denial of serviceEPSS 0.7%CVE-2022-3669MEDIUMAxiomatic Bento4 mp4edit Create memory leakEPSS 0.7%CVE-2026-1682MEDIUMFree5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereferenceEPSS 0.7%CVE-2022-4246MEDIUMKakao PotPlayer MID File denial of serviceEPSS 0.7%CVE-2022-3668MEDIUMAxiomatic Bento4 mp4edit CreateAtomFromStream memory leakEPSS 0.7%CVE-2022-3663MEDIUMAxiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereferenceEPSS 0.7%CVE-2024-57659HIGHAn issue in the sqlg_parallel_ts_seq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) vEPSS 0.7%CVE-2024-57654HIGHAn issue in the qst_vec_get_int64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via EPSS 0.7%CVE-2026-1522MEDIUMOpen5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of serviceEPSS 0.7%CVE-2024-1189MEDIUMAMPPS Encryption Passphrase denial of serviceEPSS 0.7%CVE-2026-0731MEDIUMTOTOLINK WA1200 HTTP Request cstecgi.cgi null pointer dereferenceEPSS 0.7%CVE-2024-1199MEDIUMCodeAstro Employee Task Management System attendance-info.php denial of serviceEPSS 0.7%CVE-2024-5095HIGHVictor Zsviot Camera MQTT Packet denial of serviceEPSS 0.7%CVE-2025-0704MEDIUMJoeyBling bootplus QrCodeController.java qrCode resource consumptionEPSS 0.7%CVE-2021-4280MEDIUMstyler_praat_scripts Slash file_segmenter.praat denial of serviceEPSS 0.7%