Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2021-47660MEDIUMfs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'EPSS 0.2%CVE-2021-47655MEDIUMmedia: venus: vdec: fixed possible memory leak issueEPSS 0.2%CVE-2025-30647HIGHJunos OS: MX Series: Subscriber login/logout activity will lead to a memory leakEPSS 0.2%CVE-2023-52936MEDIUMkernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()EPSS 0.2%CVE-2022-49102MEDIUMhabanalabs: fix possible memory leak in MMU DR finiEPSS 0.2%CVE-2024-56720HIGHbpf, sockmap: Several fixes to bpf_msg_pop_dataEPSS 0.2%CVE-2024-53198HIGHxen: Fix the issue of resource not being properly released in xenbus_dev_probe()EPSS 0.2%CVE-2023-23205MEDIUMAn issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.cEPSS 0.2%CVE-2024-50171MEDIUMnet: systemport: fix potential memory leak in bcm_sysport_xmit()EPSS 0.2%CVE-2023-1074MEDIUMA memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a maliciousEPSS 0.2%CVE-2024-53175MEDIUMipc: fix memleak if msg_init_ns failed in create_ipc_nsEPSS 0.2%CVE-2024-56572LOWmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()EPSS 0.2%CVE-2024-53105MEDIUMmm: page_alloc: move mlocked flag clearance into free_pages_prepare()EPSS 0.2%CVE-2022-49231HIGHrtw88: fix memory overrun and memory leak during hw_scanEPSS 0.2%CVE-2022-49534MEDIUMscsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJTEPSS 0.2%CVE-2023-33716MEDIUMmp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.EPSS 0.2%CVE-2026-91926LOWGss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeEPSS 0.2%CVE-2026-78131LOWstrongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parseEPSS 0.2%CVE-2024-26676MEDIUMaf_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.EPSS 0.2%CVE-2023-53315HIGHwifi: ath11k: Fix SKB corruption in REO destination ringEPSS 0.2%