Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-78148MEDIUMggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereferenceEPSS 0.7%CVE-2026-2062MEDIUMOpen5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereferenceEPSS 0.7%CVE-2026-41869CRITICALApache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)EPSS 0.7%CVE-2025-14747MEDIUMNingyuanda TC155 RTSP Service denial of serviceEPSS 0.7%CVE-2026-103241MEDIUMvllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of serviceEPSS 0.7%CVE-2026-117503MEDIUMa2aproject a2a-go REST SSE handler rest.go resource consumptionEPSS 0.7%CVE-2026-1683MEDIUMFree5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceEPSS 0.7%CVE-2026-0731MEDIUMTOTOLINK WA1200 HTTP Request cstecgi.cgi null pointer dereferenceEPSS 0.7%CVE-2025-6365MEDIUMHobbesOSR Kitten pgtable.h set_pte_at resource consumptionEPSS 0.7%CVE-2026-92220MEDIUMvllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionEPSS 0.7%CVE-2026-84856MEDIUMrowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of serviceEPSS 0.7%CVE-2026-82803MEDIUMarmink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereferenceEPSS 0.7%CVE-2026-86511MEDIUMjava-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumptionEPSS 0.7%CVE-2026-90582MEDIUMevanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumptionEPSS 0.7%CVE-2026-86319MEDIUMjava-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumptionEPSS 0.7%CVE-2024-1189MEDIUMAMPPS Encryption Passphrase denial of serviceEPSS 0.7%CVE-2025-8802MEDIUMOpen5GS SMF smf-sm.c smf_state_operational denial of serviceEPSS 0.7%CVE-2025-20127HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service VulnerabilityEPSS 0.7%CVE-2024-1199MEDIUMCodeAstro Employee Task Management System attendance-info.php denial of serviceEPSS 0.7%CVE-2026-2524MEDIUMOpen5GS MME mme_s11_handle_create_session_response denial of serviceEPSS 0.7%