Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2024-50197MEDIUMpinctrl: intel: platform: fix error path in device_for_each_child_node()EPSS 0.2%CVE-2022-49924MEDIUMnfc: fdp: Fix potential memory leak in fdp_nci_send()EPSS 0.2%CVE-2022-50372MEDIUMcifs: Fix memory leak when build ntlmssp negotiate blob failedEPSS 0.2%CVE-2023-53350MEDIUMaccel/qaic: Fix slicing memory leakEPSS 0.2%CVE-2024-50068MEDIUMmm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()EPSS 0.2%CVE-2023-21666HIGHImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsEPSS 0.2%CVE-2022-31222LOWDell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user coEPSS 0.2%CVE-2024-57872MEDIUMscsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()EPSS 0.2%CVE-2024-50190MEDIUMice: fix memleak in ice_init_tx_topology()EPSS 0.2%CVE-2024-50254MEDIUMbpf: Free dynamically allocated bits in bpf_iter_bits_destroy()EPSS 0.2%CVE-2026-38819MEDIUMMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memoEPSS 0.2%CVE-2024-56753MEDIUMdrm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 ModuleEPSS 0.2%CVE-2026-14697MEDIUMIPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of serviceEPSS 0.2%CVE-2022-23091MEDIUMMemory disclosure by stale virtual memory mappingEPSS 0.2%CVE-2022-29515MEDIUMMissing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privilegedEPSS 0.2%CVE-2026-33780HIGHJunos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldEPSS 0.2%CVE-2024-3860MEDIUMAn out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it woEPSS 0.2%CVE-2023-53008MEDIUMcifs: fix potential memory leaks in session setupEPSS 0.2%CVE-2023-53014MEDIUMdmaengine: tegra: Fix memory leak in terminate_all()EPSS 0.2%CVE-2022-50396MEDIUMnet: sched: fix memory leak in tcindex_set_parmsEPSS 0.2%