Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2026-73565MEDIUM@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshakeEPSS 0.4%CVE-2026-71675HIGHAn issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.cEPSS 0.4%CVE-2026-25637MEDIUMImageMagick: Possible memory leak in ASHLAR encoderEPSS 0.4%CVE-2021-1595MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2023-25399MEDIUMA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This EPSS 0.4%CVE-2021-1598MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2021-1596MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2021-1597MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2026-13148MEDIUMMemory leak in scan methodEPSS 0.4%CVE-2026-21438MEDIUMwebtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams MapEPSS 0.4%CVE-2023-23145HIGHGPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.EPSS 0.4%CVE-2025-47150HIGHF5OS SNMP vulnerabilityEPSS 0.4%CVE-2026-25796MEDIUMImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return pathsEPSS 0.4%CVE-2025-14027HIGHRockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XTEPSS 0.4%CVE-2026-86040HIGHlibp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoSEPSS 0.4%CVE-2022-41847MEDIUMAn issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FiEPSS 0.4%CVE-2026-52734MEDIUMZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retentionEPSS 0.4%CVE-2024-47493HIGHJunos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crashEPSS 0.4%CVE-2022-22172MEDIUMJunos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSEPSS 0.4%CVE-2025-1992MEDIUMIBM Db2 denial of serviceEPSS 0.4%