Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2024-56632HIGHnvme-tcp: fix the memleak while create new ctrl failedEPSS 0.3%CVE-2024-39550HIGHJunos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of ServiceEPSS 0.3%CVE-2026-102053MEDIUMJunos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is usedEPSS 0.3%CVE-2023-33086HIGHImproper Release of Memory Before Removing Last Reference in Data ModemEPSS 0.3%CVE-2023-33084HIGHImproper Release of Memory Before Removing Last Reference in Data ModemEPSS 0.3%CVE-2023-33049HIGHImproper Release of Memory Before Removing Last Reference in Multi-Mode Call ProcessorEPSS 0.3%CVE-2026-43502HIGHnet/rds: handle zerocopy send cleanup before the message is queuedEPSS 0.3%CVE-2022-35085MEDIUMSWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.EPSS 0.3%CVE-2025-46686LOWRedis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs beEPSS 0.3%CVE-2022-49468MEDIUMthermal/core: Fix memory leak in __thermal_cooling_device_register()EPSS 0.3%CVE-2023-22406MEDIUMJunos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPFEPSS 0.3%CVE-2023-22414MEDIUMJunos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processedEPSS 0.3%CVE-2026-101025MEDIUMNGINX ngx_http_js_module vulnerabilityEPSS 0.3%CVE-2023-22392MEDIUMJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leakEPSS 0.3%CVE-2025-25566MEDIUMMemory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. NOTE: EPSS 0.3%CVE-2025-54805MEDIUMTMM VulnerabilityEPSS 0.3%CVE-2026-24828HIGHMemory leak in is-EngineEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%CVE-2026-102032HIGHJunos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are presentEPSS 0.3%CVE-2026-88385MEDIUMMini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing. Specially crafted XML input can cause EPSS 0.3%