Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-38641HIGHAn issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafteEPSS 0.6%CVE-2026-112082HIGHsgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of serviceEPSS 0.6%CVE-2022-3647LOWRedis Crash Report debug.c sigsegvHandler denial of serviceEPSS 0.6%CVE-2026-1976MEDIUMFree5GC SMF SessionDeletionResponse null pointer dereferenceEPSS 0.6%CVE-2026-1975MEDIUMFree5GC pfcp_reports.go identityTriggerType null pointer dereferenceEPSS 0.6%CVE-2026-1973MEDIUMFree5GC SMF establishPfcpSession null pointer dereferenceEPSS 0.6%CVE-2026-13491MEDIUM78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of serviceEPSS 0.6%CVE-2026-6607MEDIUMlm-sys fastchat Worker API Endpoint api_generate resource consumptionEPSS 0.6%CVE-2025-6530MEDIUM70mai M300 Telnet Service demo.sh denial of serviceEPSS 0.6%CVE-2023-6180MEDIUMResource exhaustion via memory leak in tokio-boringEPSS 0.6%CVE-2022-3684HIGHSDM600 endpoint vulnerability EPSS 0.6%CVE-2023-4882HIGHMultiple vulnerabilities in Open5GSEPSS 0.6%CVE-2025-3122LOWWebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereferenceEPSS 0.6%CVE-2025-24811HIGHA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211EPSS 0.6%CVE-2024-9787MEDIUMContemporary Control System BASrouter BACnet BASRT-B UDP Packet denial of serviceEPSS 0.6%CVE-2025-1152LOWGNU Binutils ld xstrdup.c xstrdup memory leakEPSS 0.6%CVE-2026-1521MEDIUMOpen5GS SGWC s5c-handler.c denial of serviceEPSS 0.6%CVE-2025-1151LOWGNU Binutils ld xmemdup.c xmemdup memory leakEPSS 0.6%CVE-2025-1150LOWGNU Binutils ld libbfd.c bfd_malloc memory leakEPSS 0.6%CVE-2026-3816MEDIUMOWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of serviceEPSS 0.6%