Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-54280LOWAIOHTTP: Payload Response Resources Are Not Closed After Mid-Body DisconnectEPSS 0.5%CVE-2026-12575HIGHDVP80ES3 Improper Resource Shutdown or Release VulnerabilityEPSS 0.5%CVE-2025-14953LOWOpen5GS FAR-ID handler.c ogs_pfcp_handle_create_pdr null pointer dereferenceEPSS 0.5%CVE-2024-27527HIGHwasm3 139076a is vulnerable to Denial of Service (DoS).EPSS 0.5%CVE-2026-8744MEDIUMOpen5GS NRF context.c ogs_sbi_nf_service_add denial of serviceEPSS 0.5%CVE-2022-28887MEDIUMMultiple Denial of Service VulnerabilityEPSS 0.4%CVE-2025-5031LOWAckites KillWxapkg wxapkg File Decompression resource consumptionEPSS 0.4%CVE-2024-4292MEDIUMContemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service denial of serviceEPSS 0.4%CVE-2025-52982HIGHJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashEPSS 0.4%CVE-2026-113872HIGHmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownEPSS 0.4%CVE-2026-15690LOWopen62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereferenceEPSS 0.4%CVE-2025-41399HIGHSCTP VulnerabilityEPSS 0.4%CVE-2026-10069HIGHShibby Tomato miniupnpd resource consumptionEPSS 0.4%CVE-2026-4531MEDIUMFree5GC AMF handler.go HandleRegistrationComplete denial of serviceEPSS 0.4%CVE-2026-5661MEDIUMFree5GC NGSetupRequest denial of serviceEPSS 0.4%CVE-2022-48489—Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2022-48499HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2022-48500HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2026-2957MEDIUMqinming99 dst-admin File BackupController.java deleteBackup denial of serviceEPSS 0.4%CVE-2026-10650MEDIUMwarmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumptionEPSS 0.4%