Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-91780MEDIUMGNU Binutils elflink.c elf_link_add_object_symbols null pointer dereferenceEPSS 0.2%CVE-2026-1990MEDIUMoatpp Type.hpp ObjectWrapper null pointer dereferenceEPSS 0.2%CVE-2026-91779MEDIUMGNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereferenceEPSS 0.2%CVE-2026-90609MEDIUMGPAC MP4Box vrml_tools.c null pointer dereferenceEPSS 0.2%CVE-2026-15184MEDIUMGNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereferenceEPSS 0.2%CVE-2026-90576MEDIUMGPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereferenceEPSS 0.2%CVE-2026-19382MEDIUMAlmico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leakEPSS 0.2%CVE-2026-90573MEDIUMGPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereferenceEPSS 0.2%CVE-2026-90622MEDIUMGNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereferenceEPSS 0.2%CVE-2025-6496MEDIUMHTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereferenceEPSS 0.2%CVE-2026-90485MEDIUMIOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereferenceEPSS 0.2%CVE-2026-90830MEDIUMGNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereferenceEPSS 0.2%CVE-2025-8735MEDIUMGNU cflow Lexer c.c yylex null pointer dereferenceEPSS 0.2%CVE-2026-72005HIGHwifi: rt2x00: avoid full teardown before work setup in probeEPSS 0.2%CVE-2026-91427LOWVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affEPSS 0.2%CVE-2026-71073MEDIUMVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.EPSS 0.2%CVE-2023-6450MEDIUMAn incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resultEPSS 0.2%CVE-2026-14650MEDIUMconnorskees grass UTF-8 Character raw_to_parse_error denial of serviceEPSS 0.2%CVE-2026-9572MEDIUMGPAC MP4Box media.c Media_GetSample memory leakEPSS 0.2%CVE-2026-90713MEDIUMvllm-project vLLM tiktoken vocab File mod.rs new denial of serviceEPSS 0.2%