Fallos del tipo CWE-401

664 resultados

Vazamento de memória por falta de liberação

Ocorre quando o código aloca memória (heap, buffer ou outros recursos) mas nunca a libera adequadamente, mesmo após seu uso terminar. A memória fica presa e indisponível, consumindo recursos até o programa encerrar ou falhar. É especialmente crítico em serviços de longa execução (daemons, servidores) onde o vazamento se acumula.

Ejemplo

Um servidor web que cria um objeto para processar cada requisição, mas esquece de desalocá-lo no final do tratamento. Após milhares de requisições, a memória disponível se esgota e o serviço cai. Ou código em C que chama malloc() mas nunca free(), deixando a memória órfã.

Cómo mitigar

Use garbage collection ou linguagens gerenciadas quando possível; em C/C++, aplique padrões como RAII (Resource Acquisition Is Initialization) ou smart pointers; faça code review focado em pares alloc/free; use ferramentas como Valgrind ou AddressSanitizer para detectar vazamentos antes da produção.

CVE-2022-41624HIGHBIG-IP iRules vulnerability CVE-2022-41624EPSS 0.7%CVE-2023-28982HIGHJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occurEPSS 0.6%CVE-2026-35505HIGHOFFIS DCMTK Toolkit Missing Release of Memory after Effective LifetimeEPSS 0.6%CVE-2026-50254HIGHOFFIS DCMTK Toolkit Missing Release of Memory after Effective LifetimeEPSS 0.6%CVE-2024-24148HIGHA memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF fEPSS 0.6%CVE-2023-22417HIGHJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crashEPSS 0.6%CVE-2024-24155MEDIUMBento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly EPSS 0.6%CVE-2022-43032MEDIUMAn issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescripEPSS 0.6%CVE-2025-1148LOWGNU Binutils ld ldelfgen.c link_order_scan memory leakEPSS 0.6%CVE-2022-25479MEDIUMVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card ReadEPSS 0.6%CVE-2026-16028HIGHProtocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream tableEPSS 0.6%CVE-2026-48059HIGHNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory ExhaustionEPSS 0.6%CVE-2023-43076MEDIUM Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially eEPSS 0.6%CVE-2023-29163HIGHBIG-IP UDP Profile vulnerabilityEPSS 0.6%CVE-2025-1152LOWGNU Binutils ld xstrdup.c xstrdup memory leakEPSS 0.6%CVE-2022-43037MEDIUMAn issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File::ParseStream in /Core/Ap4File.cpp.EPSS 0.6%CVE-2021-47031MEDIUMmt76: mt7921: fix memory leak in mt7921_coredump_workEPSS 0.6%CVE-2022-23159MEDIUMDell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user wiEPSS 0.6%CVE-2025-1150LOWGNU Binutils ld libbfd.c bfd_malloc memory leakEPSS 0.6%CVE-2025-21599HIGHJunos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of ServiceEPSS 0.6%