Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2026-25969MEDIUMImageMagick has Memory Leak in coders/ashlar.cEPSS 0.4%CVE-2019-3815LOWA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in joEPSS 0.4%CVE-2026-13148MEDIUMMemory leak in scan methodEPSS 0.4%CVE-2021-31367MEDIUMJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashEPSS 0.4%CVE-2022-41847MEDIUMAn issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FiEPSS 0.4%CVE-2026-87078CRITICALNet::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycodeEPSS 0.4%CVE-2025-26306MEDIUMA memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denialEPSS 0.4%CVE-2025-26307MEDIUMA memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to causeEPSS 0.4%CVE-2025-26308MEDIUMA memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a EPSS 0.4%CVE-2022-22168MEDIUMJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootEPSS 0.4%CVE-2025-26311MEDIUMMultiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in utiEPSS 0.4%CVE-2025-1992MEDIUMIBM Db2 denial of serviceEPSS 0.4%CVE-2026-120678HIGHMongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)EPSS 0.4%CVE-2025-47150HIGHF5OS SNMP vulnerabilityEPSS 0.4%CVE-2023-23145HIGHGPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.EPSS 0.4%CVE-2025-14027HIGHRockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XTEPSS 0.4%CVE-2021-1597MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2021-1596MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2023-25399MEDIUMA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This EPSS 0.4%CVE-2021-1595MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%