Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2025-49488MEDIUMResource leaks in routerEPSS 0.3%CVE-2025-8844MEDIUMNASM Netwide Assember preproc.c parse_smacro_template null pointer dereferenceEPSS 0.3%CVE-2026-3206LOWImproper management of context cancelationsEPSS 0.3%CVE-2025-2953MEDIUMPyTorch torch.mkldnn_max_pool2d denial of serviceEPSS 0.3%CVE-2022-3624LOWLinux Kernel IPsec bond_alb.c rlb_arp_xmit memory leakEPSS 0.3%CVE-2024-1195MEDIUMiTop VPN IOCTL ITopVpnCallbackProcess.sys denial of serviceEPSS 0.3%CVE-2025-6375MEDIUMpoco MultipartReader.cpp MultipartInputStream null pointer dereferenceEPSS 0.3%CVE-2022-3630LOWLinux Kernel IPsec cookie.c memory leakEPSS 0.3%CVE-2026-21975MEDIUMVulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.29 and 21.3-21.20. EasiEPSS 0.3%CVE-2025-2926MEDIUMHDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereferenceEPSS 0.3%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2025-9384MEDIUMappneta tcpreplay parse_args.c tcpedit_post_args null pointer dereferenceEPSS 0.2%CVE-2025-10999MEDIUMOpen Babel cacaoformat.cpp SetHilderbrandt null pointer dereferenceEPSS 0.2%CVE-2024-25087MEDIUMDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.EPSS 0.2%CVE-2025-13524MEDIUMImproper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call pEPSS 0.2%CVE-2024-23249MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.2%CVE-2025-6140MEDIUMspdlog pattern_formatter-inl.h scoped_padder resource consumptionEPSS 0.2%CVE-2022-3407MEDIUMI some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if theEPSS 0.2%CVE-2023-1369MEDIUMTG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of serviceEPSS 0.2%CVE-2025-11000MEDIUMOpen Babel PQSformat.cpp ReadMolecule null pointer dereferenceEPSS 0.2%