Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-1683MEDIUMFree5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceEPSS 0.7%CVE-2026-2062MEDIUMOpen5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereferenceEPSS 0.7%CVE-2023-20042MEDIUMA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTEPSS 0.7%CVE-2025-6530MEDIUM70mai M300 Telnet Service demo.sh denial of serviceEPSS 0.6%CVE-2025-2591MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zeroEPSS 0.6%CVE-2026-92417HIGHOpen5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceEPSS 0.6%CVE-2025-1148LOWGNU Binutils ld ldelfgen.c link_order_scan memory leakEPSS 0.6%CVE-2026-59725HIGHSocket.IO: Engine.IO Polling Transport Connection ExhaustionEPSS 0.6%CVE-2026-8187MEDIUMOpen5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumptionEPSS 0.6%CVE-2022-2776MEDIUMSourceCodester Gym Management System delete_user.php denial of serviceEPSS 0.6%CVE-2026-2524MEDIUMOpen5GS MME mme_s11_handle_create_session_response denial of serviceEPSS 0.6%CVE-2025-20127HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service VulnerabilityEPSS 0.6%CVE-2026-38641HIGHAn issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafteEPSS 0.6%CVE-2025-8802MEDIUMOpen5GS SMF smf-sm.c smf_state_operational denial of serviceEPSS 0.6%CVE-2026-13491MEDIUM78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of serviceEPSS 0.6%CVE-2025-3016MEDIUMOpen Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumptionEPSS 0.6%CVE-2026-6607MEDIUMlm-sys fastchat Worker API Endpoint api_generate resource consumptionEPSS 0.6%CVE-2025-1846MEDIUMzj1983 zz File ZfileAction.java deleteLocalFile denial of serviceEPSS 0.6%CVE-2023-6180MEDIUMResource exhaustion via memory leak in tokio-boringEPSS 0.6%CVE-2025-1152LOWGNU Binutils ld xstrdup.c xstrdup memory leakEPSS 0.6%