Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2026-108949MEDIUMApache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOMEPSS 0.5%CVE-2023-31975LOWyasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties disEPSS 0.5%CVE-2024-39549HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leakEPSS 0.5%CVE-2025-25469HIGHFFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.EPSS 0.5%CVE-2024-5294MEDIUMD-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service VulnerabilityEPSS 0.5%CVE-2026-56368MEDIUMImageMagick - Memory Leak in Raw Pixel Data CodersEPSS 0.5%CVE-2026-47888HIGHSpring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerEPSS 0.5%CVE-2025-61974HIGHBIG-IP SSL/TLS vulnerabilityEPSS 0.5%CVE-2026-76489MEDIUMMultiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service VulnerabilityEPSS 0.5%CVE-2026-15892MEDIUMHeap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of serviceEPSS 0.5%CVE-2024-50170HIGHnet: bcmasp: fix potential memory leak in bcmasp_xmit()EPSS 0.5%CVE-2026-110684HIGHCpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringifyEPSS 0.5%CVE-2025-21091HIGHBIG-IP SNMP vulnerabilityEPSS 0.5%CVE-2026-104874MEDIUMMultidict: Reference leak in CIMultiDict/MultiDict items-view union and subtractionEPSS 0.4%CVE-2026-121512HIGHMissing Release of Memory after Effective Lifetime in µD3TNEPSS 0.4%CVE-2026-63448MEDIUMSuricata smb: some SMB flows can cause resource exhaustionEPSS 0.4%CVE-2026-109262MEDIUMImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG EncoderEPSS 0.4%CVE-2024-7708HIGHFor requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case forEPSS 0.4%CVE-2026-56371MEDIUMImageMagick - Memory Leak in TXT File Processing via Texture AttributeEPSS 0.4%CVE-2026-25637MEDIUMImageMagick: Possible memory leak in ASHLAR encoderEPSS 0.4%