Weaknesses of type CWE-404

694 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2024-2180MEDIUMZemana AntiLogger v2.74.204.664 - Kernel Memory LeakEPSS 0.3%CVE-2025-3198MEDIUMGNU Binutils objdump bucomm.c display_info memory leakEPSS 0.3%CVE-2026-54280LOWAIOHTTP: Payload Response Resources Are Not Closed After Mid-Body DisconnectEPSS 0.3%CVE-2024-44201MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, mEPSS 0.3%CVE-2024-11097MEDIUMSourceCodester Student Record Management System Main Menu infinite loopEPSS 0.3%CVE-2026-10156MEDIUMOpen5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumptionEPSS 0.3%CVE-2026-7708MEDIUMOpen5GS UDR subscription.c ogs_dbi_subscription_data denial of serviceEPSS 0.3%CVE-2026-7706MEDIUMOpen5GS AMF gmm-handler.c gmm_handle_service_request denial of serviceEPSS 0.3%CVE-2026-7780MEDIUMOpen5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of serviceEPSS 0.3%CVE-2026-6601MEDIUMLagom WHMCS Template Datatables resource consumptionEPSS 0.3%CVE-2024-21253LOWVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are PrioEPSS 0.3%CVE-2025-9396MEDIUMckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereferenceEPSS 0.3%CVE-2022-3637LOWLinux Kernel BlueZ jlink.c jlink_init denial of serviceEPSS 0.3%CVE-2026-10117MEDIUMOpen5GS nghttp2-server.c ogs_pool_id_calloc denial of serviceEPSS 0.3%CVE-2026-84885MEDIUMsimular-ai Agent-S CodeAgent code_agent.py denial of serviceEPSS 0.3%CVE-2026-84427MEDIUMzhayujie CowAgent Bash Tool bash.py denial of serviceEPSS 0.3%CVE-2026-7583MEDIUMOpen5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of serviceEPSS 0.3%CVE-2026-84288MEDIUMNousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of serviceEPSS 0.3%CVE-2026-7781MEDIUMOpen5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of serviceEPSS 0.3%CVE-2026-84425MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceEPSS 0.3%