Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-35894MEDIUMAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted EPSS 0.3%CVE-2026-20281HIGHCisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service VulnerabilityEPSS 0.3%CVE-2026-24825MEDIUMa memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.EPSS 0.3%CVE-2025-29483MEDIUMlibming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.EPSS 0.3%CVE-2026-34052MEDIUMLTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)EPSS 0.3%CVE-2024-39550HIGHJunos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of ServiceEPSS 0.3%CVE-2025-56353HIGHIn tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), a memory leak occurs due to the broker's failure to validate or reEPSS 0.3%CVE-2026-25638MEDIUMImageMagick has memory leak in msl encoderEPSS 0.3%CVE-2025-47279LOWundici Denial of Service attack via bad certificate dataEPSS 0.3%CVE-2023-33086HIGHImproper Release of Memory Before Removing Last Reference in Data ModemEPSS 0.3%CVE-2026-47888HIGHSpring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerEPSS 0.3%CVE-2023-33084HIGHImproper Release of Memory Before Removing Last Reference in Data ModemEPSS 0.3%CVE-2023-33049HIGHImproper Release of Memory Before Removing Last Reference in Multi-Mode Call ProcessorEPSS 0.3%CVE-2022-35085MEDIUMSWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.EPSS 0.3%CVE-2022-49468MEDIUMthermal/core: Fix memory leak in __thermal_cooling_device_register()EPSS 0.3%CVE-2026-20106MEDIUMA vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (AEPSS 0.3%CVE-2026-20105HIGHA vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure FiEPSS 0.3%CVE-2026-13698MEDIUMA memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valiEPSS 0.3%CVE-2022-3633LOWLinux Kernel transport.c j1939_session_destroy memory leakEPSS 0.3%CVE-2024-42649MEDIUMNanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via a crafted PUBLISH messEPSS 0.3%