Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2021-1595MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2025-56226MEDIUMLibsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.EPSS 0.4%CVE-2026-102081HIGHJunos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact trafficEPSS 0.4%CVE-2026-91926LOWGss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeEPSS 0.4%CVE-2026-20106MEDIUMA vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (AEPSS 0.4%CVE-2024-47493HIGHJunos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crashEPSS 0.4%CVE-2026-23414HIGHtls: Purge async_hold in tls_decrypt_async_wait()EPSS 0.4%CVE-2026-24825MEDIUMa memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.EPSS 0.4%CVE-2022-3629LOWLinux Kernel af_vsock.c vsock_connect memory leakEPSS 0.4%CVE-2022-22172MEDIUMJunos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSEPSS 0.4%CVE-2026-25638MEDIUMImageMagick has memory leak in msl encoderEPSS 0.4%CVE-2026-67430MEDIUMMCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize floodEPSS 0.4%CVE-2026-109278MEDIUMImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise OperationEPSS 0.4%CVE-2026-108748MEDIUMQuarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocketEPSS 0.4%CVE-2026-16028HIGHProtocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream tableEPSS 0.4%CVE-2026-20105HIGHA vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure FiEPSS 0.4%CVE-2024-9135MEDIUMOn affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.EPSS 0.4%CVE-2026-20012HIGHA vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall AEPSS 0.4%CVE-2024-0240MEDIUMSilicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clientsEPSS 0.4%CVE-2021-34740HIGHCisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service VulnerabilityEPSS 0.4%