Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-8250MEDIUMOpen5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of serviceEPSS 0.4%CVE-2026-8289MEDIUMOpen5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of serviceEPSS 0.4%CVE-2026-8292MEDIUMOpen5GS NRF conv.c yuarel_parse denial of serviceEPSS 0.4%CVE-2026-8123MEDIUMOpen5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of serviceEPSS 0.4%CVE-2026-8267MEDIUMOpen5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of serviceEPSS 0.4%CVE-2026-8249MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.4%CVE-2026-115971MEDIUMTravisun Opptrix preParsing handler webhook Buffer.concat denial of serviceEPSS 0.4%CVE-2023-1451LOWMP4v2 mp4track.cpp GetSampleFileOffset denial of serviceEPSS 0.4%CVE-2024-12345MEDIUMINW Krbyyyzo Daily Huddle Site gbo.aspx resource consumptionEPSS 0.4%CVE-2023-1188LOWFabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of serviceEPSS 0.4%CVE-2026-10190HIGHTenda W12 Web Management httpd cgiSysWebTimeoutSet denial of serviceEPSS 0.4%CVE-2023-1157LOWfinixbit elf-parser elf_parser.cpp get_segments denial of serviceEPSS 0.4%CVE-2023-1187LOWFabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of serviceEPSS 0.4%CVE-2024-1192LOWSouth River WebDrive New Secure WebDAV denial of serviceEPSS 0.4%CVE-2026-7518MEDIUMOpen5GS AMF SBI Endpoint sdmsubscription-notify amf_namf_callback_handle_sdm_data_change_notify denial of serviceEPSS 0.4%CVE-2024-1186LOWMunsoft Easy Archive Recovery Registration Key denial of serviceEPSS 0.4%CVE-2026-60624MEDIUMVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.EPSS 0.4%CVE-2024-1185LOWNsasoft NBMonitor Network Bandwidth Monitor Registration denial of serviceEPSS 0.4%CVE-2025-0221MEDIUMIOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereferenceEPSS 0.4%CVE-2025-0222MEDIUMIObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereferenceEPSS 0.4%