Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-2524MEDIUMOpen5GS MME mme_s11_handle_create_session_response denial of serviceEPSS 0.7%CVE-2024-5095HIGHVictor Zsviot Camera MQTT Packet denial of serviceEPSS 0.7%CVE-2026-68161CRITICALsctp: close UDP tunnel sockets during netns teardownEPSS 0.7%CVE-2026-92417HIGHOpen5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceEPSS 0.7%CVE-2022-2776MEDIUMSourceCodester Gym Management System delete_user.php denial of serviceEPSS 0.7%CVE-2025-3016MEDIUMOpen Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumptionEPSS 0.7%CVE-2026-75012HIGHTOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereferenceEPSS 0.7%CVE-2026-75013HIGHTOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereferenceEPSS 0.7%CVE-2025-2591MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zeroEPSS 0.7%CVE-2025-8800MEDIUMOpen5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of serviceEPSS 0.6%CVE-2025-8803MEDIUMOpen5GS AMF gmm-sm.c gmm_state_exception denial of serviceEPSS 0.6%CVE-2025-31237HIGHThis issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. MountinEPSS 0.6%CVE-2025-15687MEDIUMOpen5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of serviceEPSS 0.6%CVE-2026-3269MEDIUMpsi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of serviceEPSS 0.6%CVE-2026-84886MEDIUMsimular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumptionEPSS 0.6%CVE-2026-19362MEDIUMlmammino oidc-authorizer Authorization Header Parsing parse_token_from_header.rs parse_token_from_header denial of serviceEPSS 0.6%CVE-2026-59725HIGHSocket.IO: Engine.IO Polling Transport Connection ExhaustionEPSS 0.6%CVE-2025-1148LOWGNU Binutils ld ldelfgen.c link_order_scan memory leakEPSS 0.6%CVE-2026-8187MEDIUMOpen5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumptionEPSS 0.6%CVE-2025-1846MEDIUMzj1983 zz File ZfileAction.java deleteLocalFile denial of serviceEPSS 0.6%