Fallos del tipo CWE-401

750 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-43222HIGHopen5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause aEPSS 1.0%CVE-2022-43221HIGHopen5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause aEPSS 1.0%CVE-2023-38380HIGHA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUEPSS 1.0%CVE-2023-6299MEDIUMApryse iText Reference Table PdfDocument.java memory leakEPSS 0.9%CVE-2021-23218MEDIUMMemory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of ServiceEPSS 0.9%CVE-2021-34598HIGHPhoenix Contact: FL MGUARD lack of memory release in remote logging functionalityEPSS 0.9%CVE-2022-22174HIGHJunos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packetsEPSS 0.9%CVE-2022-45920HIGHIn Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak.EPSS 0.9%CVE-2023-34451HIGHCometBFT may duplicate transactions in the mempool's data structuresEPSS 0.9%CVE-2020-27755—in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the propEPSS 0.9%CVE-2020-27753—There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a speciallyEPSS 0.9%CVE-2023-34450LOWCometBFT PeerState JSON serialization deadlockEPSS 0.9%CVE-2023-43076MEDIUM Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially eEPSS 0.8%CVE-2023-24511MEDIUMOn affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.EPSS 0.8%CVE-2022-22205HIGHJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenarioEPSS 0.8%CVE-2025-20133HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service VulnerabilityEPSS 0.8%CVE-2025-47935HIGHMulter vulnerable to Denial of Service via memory leaks from unclosed streamsEPSS 0.8%CVE-2023-22410HIGHJunos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.EPSS 0.8%CVE-2023-3592MEDIUMIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typEPSS 0.8%CVE-2023-28096MEDIUMOpenSIPS has memory leak in cJSON libEPSS 0.8%