Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-42326MEDIUMXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explaEPSS 0.3%CVE-2026-33782HIGHJunos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logoutsEPSS 0.3%CVE-2026-56116HIGHdhcpcd Memory Leak DoS via IPv6 Router Advertisement HandlingEPSS 0.3%CVE-2022-43255MEDIUMGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c.EPSS 0.3%CVE-2026-18076MEDIUMIBM i is Affected By Multiple Vulnerabilities in Debug ServerEPSS 0.3%CVE-2023-52670MEDIUMrpmsg: virtio: Free driver_override when rpmsg_remove()EPSS 0.3%CVE-2026-20014HIGHA vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remotEPSS 0.3%CVE-2022-49713MEDIUMusb: dwc2: Fix memory leak in dwc2_hcd_initEPSS 0.3%CVE-2026-56365MEDIUMImageMagick - Memory Leak in PNG Encoder via MNG Image WritingEPSS 0.3%CVE-2026-56818MEDIUMNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateEPSS 0.3%CVE-2025-3198MEDIUMGNU Binutils objdump bucomm.c display_info memory leakEPSS 0.3%CVE-2022-49358MEDIUMnetfilter: nf_tables: memleak flow rule from commit pathEPSS 0.3%CVE-2023-22392MEDIUMJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leakEPSS 0.3%CVE-2021-31240HIGHAn issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c fEPSS 0.3%CVE-2022-49671MEDIUMRDMA/cm: Fix memory leak in ib_cm_insert_listenEPSS 0.3%CVE-2023-33717MEDIUMmp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch excepEPSS 0.3%CVE-2022-49653MEDIUMi2c: piix4: Fix a memory leak in the EFCH MMIO supportEPSS 0.3%CVE-2022-40884MEDIUMBento4 1.6.0 has memory leaks via the mp4fragment.EPSS 0.3%CVE-2025-46686LOWRedis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs beEPSS 0.3%CVE-2022-49657MEDIUMusbnet: fix memory leak in error caseEPSS 0.3%