Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-10156MEDIUMOpen5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumptionEPSS 0.3%CVE-2024-11097MEDIUMSourceCodester Student Record Management System Main Menu infinite loopEPSS 0.3%CVE-2026-7780MEDIUMOpen5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of serviceEPSS 0.3%CVE-2026-7708MEDIUMOpen5GS UDR subscription.c ogs_dbi_subscription_data denial of serviceEPSS 0.3%CVE-2026-6601MEDIUMLagom WHMCS Template Datatables resource consumptionEPSS 0.3%CVE-2026-108769MEDIUMzhayujie CowAgent Markdown Rendering Markdown.tsx denial of serviceEPSS 0.3%CVE-2026-7706MEDIUMOpen5GS AMF gmm-handler.c gmm_handle_service_request denial of serviceEPSS 0.3%CVE-2025-8224MEDIUMGNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereferenceEPSS 0.3%CVE-2022-4981MEDIUMDCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereferenceEPSS 0.3%CVE-2024-21253LOWVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are PrioEPSS 0.3%CVE-2025-8225MEDIUMGNU Binutils DWARF Section dwarf.c process_debug_info memory leakEPSS 0.3%CVE-2026-45090HIGHDalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)EPSS 0.3%CVE-2026-3206LOWImproper management of context cancelationsEPSS 0.3%CVE-2026-7583MEDIUMOpen5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of serviceEPSS 0.3%CVE-2026-108681MEDIUMzhayujie CowAgent Web Console web_channel.py denial of serviceEPSS 0.3%CVE-2026-7781MEDIUMOpen5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of serviceEPSS 0.3%CVE-2026-10117MEDIUMOpen5GS nghttp2-server.c ogs_pool_id_calloc denial of serviceEPSS 0.3%CVE-2022-3624LOWLinux Kernel IPsec bond_alb.c rlb_arp_xmit memory leakEPSS 0.3%CVE-2025-8586MEDIUMlibav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereferenceEPSS 0.3%CVE-2023-0909LOWcxasm notepad-- Directory Comparison denial of serviceEPSS 0.3%