Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2025-7068MEDIUMHDF5 H5FL.c H5FL__malloc memory leakEPSS 0.2%CVE-2025-6858MEDIUMHDF5 H5Centry.c H5C__flush_single_entry null pointer dereferenceEPSS 0.2%CVE-2025-6140MEDIUMspdlog pattern_formatter-inl.h scoped_padder resource consumptionEPSS 0.2%CVE-2024-25087MEDIUMDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.EPSS 0.2%CVE-2025-11000MEDIUMOpen Babel PQSformat.cpp ReadMolecule null pointer dereferenceEPSS 0.2%CVE-2024-23249MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.2%CVE-2025-5324MEDIUMTechPowerUp GPU-Z 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leakEPSS 0.2%CVE-2025-7209MEDIUM9fans plan9port x509.c value_decode null pointer dereferenceEPSS 0.2%CVE-2026-108682MEDIUMzhayujie CowAgent Web Console upload read denial of serviceEPSS 0.2%CVE-2025-8835MEDIUMJasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereferenceEPSS 0.2%CVE-2022-3407MEDIUMI some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if theEPSS 0.2%CVE-2025-12206MEDIUMKamailio rvalue.c rve_is_constant null pointer dereferenceEPSS 0.2%CVE-2023-1369MEDIUMTG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of serviceEPSS 0.2%CVE-2026-6042MEDIUMmusl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexityEPSS 0.2%CVE-2025-6498MEDIUMHTACG tidy-html5 alloc.c defaultAlloc memory leakEPSS 0.2%CVE-2026-118276MEDIUMa2ui-project a2ui Parser expression_parser.ts formatString resource consumptionEPSS 0.2%CVE-2022-23717MEDIUMPingID Windows Login prior to 2.8 denial of service conditionEPSS 0.2%CVE-2025-8732MEDIUMlibxml2 xmlcatalog xmlParseSGMLCatalog recursionEPSS 0.2%CVE-2025-6274MEDIUMWebAssembly wabt binary-reader-interp.cc OnDataCount resource consumptionEPSS 0.2%CVE-2025-15419MEDIUMOpen5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of serviceEPSS 0.2%