Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-42326MEDIUMXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explaEPSS 0.3%CVE-2026-116152MEDIUMImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error PathEPSS 0.3%CVE-2026-23095HIGHgue: Fix skb memleak with inner IP protocol 0.EPSS 0.3%CVE-2023-22395MEDIUMJunos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivityEPSS 0.3%CVE-2026-116154MEDIUMImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth LimitEPSS 0.3%CVE-2026-116155MEDIUMImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP ProfileEPSS 0.3%CVE-2026-33782HIGHJunos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logoutsEPSS 0.3%CVE-2026-110754MEDIUMText::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getlineEPSS 0.3%CVE-2022-43255MEDIUMGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c.EPSS 0.3%CVE-2023-0248HIGHKantech Gen1 ioSmart card readerEPSS 0.3%CVE-2022-40884MEDIUMBento4 1.6.0 has memory leaks via the mp4fragment.EPSS 0.3%CVE-2023-7192MEDIUMKernel: refcount leak in ctnetlink_create_conntrack()EPSS 0.3%CVE-2023-0597MEDIUMA flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess lEPSS 0.3%CVE-2022-43254MEDIUMGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c.EPSS 0.3%CVE-2024-21609HIGHJunos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leakEPSS 0.3%CVE-2026-77684MEDIUMBluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of serviceEPSS 0.3%CVE-2026-13593MEDIUMCSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified awayEPSS 0.3%CVE-2024-21599MEDIUMJunos OS: MX Series: MPC3E memory leak with PTP configurationEPSS 0.3%CVE-2023-2683MEDIUMConnection update while closing connection may lead to denial-of-serviceEPSS 0.3%CVE-2022-49370MEDIUMfirmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handleEPSS 0.3%