Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2025-46686LOWRedis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs beEPSS 0.3%CVE-2022-49115MEDIUMPCI: endpoint: Fix misused goto labelEPSS 0.3%CVE-2026-24828HIGHMemory leak in is-EngineEPSS 0.3%CVE-2026-43506MEDIUMAn issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustionEPSS 0.3%CVE-2024-21613MEDIUMJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crashEPSS 0.3%CVE-2026-20746MEDIUMPingDirectory copying of virtual attributes leads to memory exhaustionEPSS 0.3%CVE-2026-46679HIGHlibp2p: Memory DoS via subscription flood of unique topicsEPSS 0.3%CVE-2022-45204MEDIUMGPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c.EPSS 0.3%CVE-2022-49277MEDIUMjffs2: fix memory leak in jffs2_do_mount_fsEPSS 0.3%CVE-2026-15892MEDIUMHeap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of serviceEPSS 0.3%CVE-2022-43151MEDIUMtimg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc.EPSS 0.3%CVE-2026-10774LOWPSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource-exhaustion DoSEPSS 0.3%CVE-2022-49648MEDIUMtracing/histograms: Fix memory leak problemEPSS 0.3%CVE-2021-4453MEDIUMdrm/amd/pm: fix a potential gpu_metrics_table memory leakEPSS 0.3%CVE-2022-49331MEDIUMnfc: st21nfca: fix memory leaks in EVT_TRANSACTION handlingEPSS 0.3%CVE-2025-66033MEDIUMImproper Memory Cleanup in the Okta Java SDKEPSS 0.3%CVE-2022-49627MEDIUMima: Fix potential memory leak in ima_init_crypto()EPSS 0.3%CVE-2022-46489MEDIUMGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.EPSS 0.3%CVE-2022-46490MEDIUMGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.EPSS 0.3%CVE-2022-49119MEDIUMscsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()EPSS 0.3%