Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-49230MEDIUMmt76: mt7915: fix possible memory leak in mt7915_mcu_add_staEPSS 0.3%CVE-2022-49126MEDIUMscsi: mpi3mr: Fix memory leaksEPSS 0.3%CVE-2023-52989MEDIUMfirewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP regionEPSS 0.3%CVE-2022-49116MEDIUMBluetooth: use memset avoid memory leaksEPSS 0.3%CVE-2022-1651—A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulEPSS 0.3%CVE-2026-56371MEDIUMImageMagick - Memory Leak in TXT File Processing via Texture AttributeEPSS 0.3%CVE-2026-33852HIGHMissing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7EPSS 0.3%CVE-2025-21595HIGHJunos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crashEPSS 0.3%CVE-2026-21909HIGHJunos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crashEPSS 0.3%CVE-2023-47384MEDIUMMP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_EPSS 0.3%CVE-2021-47644MEDIUMmedia: staging: media: zoran: move videodev allocEPSS 0.3%CVE-2024-50167MEDIUMbe2net: fix potential memory leak in be_xmit()EPSS 0.3%CVE-2021-47648MEDIUMgpu: host1x: Fix a memory leak in 'host1x_remove()'EPSS 0.3%CVE-2023-2700MEDIUMA vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposesEPSS 0.3%CVE-2022-49107MEDIUMceph: fix memory leak in ceph_readdir when note_last_dentry returns errorEPSS 0.3%CVE-2024-56534MEDIUMisofs: avoid memory leak in iocharsetEPSS 0.3%CVE-2022-3577HIGHAn out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crEPSS 0.3%CVE-2024-56710LOWceph: fix memory leak in ceph_direct_read_write()EPSS 0.2%CVE-2021-0293MEDIUMJunos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedlyEPSS 0.2%CVE-2022-49105MEDIUMstaging: wfx: fix an error handling in wfx_init_common()EPSS 0.2%