Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-1684MEDIUMFree5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of serviceEPSS 0.5%CVE-2024-33844HIGHThe 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the coEPSS 0.5%CVE-2026-4240MEDIUMOpen5GS CCA smf_s6b_sta_cb denial of serviceEPSS 0.5%CVE-2026-14629MEDIUMRT-Thread Parameter lwp_syscall.c sys_ioctl divide by zeroEPSS 0.5%CVE-2024-20995LOWVulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and EPSS 0.5%CVE-2023-1488LOWLespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of serviceEPSS 0.5%CVE-2026-1586MEDIUMOpen5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of serviceEPSS 0.5%CVE-2026-1587MEDIUMOpen5GS SGWC s11-handler.c sgwc_s11_handle_modify_bearer_request denial of serviceEPSS 0.5%CVE-2025-4997HIGHH3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of serviceEPSS 0.5%CVE-2025-4998HIGHH3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of serviceEPSS 0.5%CVE-2025-1816MEDIUMFFmpeg IAMF File iamf_parse.c audio_element_obu memory leakEPSS 0.5%CVE-2024-13009HIGHEclipse Jetty GZIP buffer releaseEPSS 0.5%CVE-2026-92363MEDIUMag-ui-protocol ag-ui JSON sse_parser.cpp resource consumptionEPSS 0.5%CVE-2026-85100MEDIUM2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumptionEPSS 0.5%CVE-2024-20905LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.5%CVE-2026-92220MEDIUMvllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionEPSS 0.5%CVE-2026-2517MEDIUMOpen5GS SMF types.c ogs_gtp2_parse_tft denial of serviceEPSS 0.5%CVE-2026-1974MEDIUMFree5GC SMF datapath.go ResolveNodeIdToIp denial of serviceEPSS 0.5%CVE-2025-29357HIGHTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServEPSS 0.5%CVE-2026-2525MEDIUMFree5GC PFCP UDP Endpoint denial of serviceEPSS 0.5%