Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2024-13009HIGHEclipse Jetty GZIP buffer releaseEPSS 0.5%CVE-2026-14624MEDIUMomec-project amf NGSetupRequest handler.go denial of serviceEPSS 0.5%CVE-2026-82589MEDIUMOpen5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of serviceEPSS 0.5%CVE-2026-14618MEDIUMOpen5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of serviceEPSS 0.5%CVE-2026-92363MEDIUMag-ui-protocol ag-ui JSON sse_parser.cpp resource consumptionEPSS 0.5%CVE-2026-14623MEDIUMomec-project amf NGAP Message RRCInactiveTransitionReport denial of serviceEPSS 0.5%CVE-2026-85100MEDIUM2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumptionEPSS 0.5%CVE-2026-82588MEDIUMOpen5GS Transfer Endpoint namf-handler.c null pointer dereferenceEPSS 0.5%CVE-2024-36856HIGHRMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management. An attacker can exhaust system memoEPSS 0.5%CVE-2025-1816MEDIUMFFmpeg IAMF File iamf_parse.c audio_element_obu memory leakEPSS 0.5%CVE-2024-33844HIGHThe 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the coEPSS 0.5%CVE-2026-14629MEDIUMRT-Thread Parameter lwp_syscall.c sys_ioctl divide by zeroEPSS 0.5%CVE-2026-90878MEDIUMvllm-project vLLM Jinja Template Rendering completions resource consumptionEPSS 0.5%CVE-2026-92361MEDIUMag-ui-protocol ag-ui SSE Client client.go resource consumptionEPSS 0.5%CVE-2025-15686MEDIUMOpen5GS HSS Service fd_msg_sess_get denial of serviceEPSS 0.5%CVE-2025-13901MEDIUMCWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol wheEPSS 0.5%CVE-2024-20995LOWVulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and EPSS 0.5%CVE-2023-1488LOWLespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of serviceEPSS 0.5%CVE-2026-92362MEDIUMag-ui-protocol ag-ui SSE Frame sse.rs resource consumptionEPSS 0.5%CVE-2025-29357HIGHTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServEPSS 0.5%