Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2025-49488MEDIUMResource leaks in routerEPSS 0.3%CVE-2025-8844MEDIUMNASM Netwide Assember preproc.c parse_smacro_template null pointer dereferenceEPSS 0.3%CVE-2025-2953MEDIUMPyTorch torch.mkldnn_max_pool2d denial of serviceEPSS 0.3%CVE-2026-3206LOWImproper management of context cancelationsEPSS 0.3%CVE-2024-1195MEDIUMiTop VPN IOCTL ITopVpnCallbackProcess.sys denial of serviceEPSS 0.3%CVE-2022-3624LOWLinux Kernel IPsec bond_alb.c rlb_arp_xmit memory leakEPSS 0.3%CVE-2025-6375MEDIUMpoco MultipartReader.cpp MultipartInputStream null pointer dereferenceEPSS 0.3%CVE-2022-3630LOWLinux Kernel IPsec cookie.c memory leakEPSS 0.3%CVE-2026-21975MEDIUMVulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.29 and 21.3-21.20. EasiEPSS 0.3%CVE-2025-2926MEDIUMHDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereferenceEPSS 0.3%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2025-9384MEDIUMappneta tcpreplay parse_args.c tcpedit_post_args null pointer dereferenceEPSS 0.2%CVE-2025-10999MEDIUMOpen Babel cacaoformat.cpp SetHilderbrandt null pointer dereferenceEPSS 0.2%CVE-2024-25087MEDIUMDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.EPSS 0.2%CVE-2025-13524MEDIUMImproper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call pEPSS 0.2%CVE-2024-23249MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.2%CVE-2025-6140MEDIUMspdlog pattern_formatter-inl.h scoped_padder resource consumptionEPSS 0.2%CVE-2022-3407MEDIUMI some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if theEPSS 0.2%CVE-2023-1369MEDIUMTG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of serviceEPSS 0.2%CVE-2025-11000MEDIUMOpen Babel PQSformat.cpp ReadMolecule null pointer dereferenceEPSS 0.2%