Falhas do tipo CWE-401

750 resultados

Fuga de memória - liberação não realizada após uso

Ocorre quando o código aloca memória (heap ou recursos) mas falha em liberá-la quando não é mais necessária. A memória fica presa no processo, reduzindo gradualmente a memória disponível até causar degradação de performance ou crash. É especialmente crítico em serviços que rodam indefinidamente (daemons, APIs, servidores).

Exemplo

Um servidor web que processa requisições sem liberar buffers de conexão fechada. Após milhares de requisições, acumula KB/MB de lixo na memória. Ou uma função que abre arquivo/socket e retorna sem chamar close() em todos os caminhos possíveis (incluindo exceções).

Como mitigar

Use padrões como RAII (Resource Acquisition Is Initialization) em C++, try-finally ou context managers em Python/Java, ou verificadores de vazamento (valgrind, AddressSanitizer). Revise especialmente blocos de exceção e retornos prematuros. Testes de longa duração ajudam a detectar fugas acumulativas.

CVE-2026-25969MEDIUMImageMagick has Memory Leak in coders/ashlar.cEPSS 0.4%CVE-2019-3815LOWA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in joEPSS 0.4%CVE-2026-13148MEDIUMMemory leak in scan methodEPSS 0.4%CVE-2021-31367MEDIUMJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashEPSS 0.4%CVE-2022-41847MEDIUMAn issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FiEPSS 0.4%CVE-2026-87078CRITICALNet::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycodeEPSS 0.4%CVE-2025-26306MEDIUMA memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denialEPSS 0.4%CVE-2025-26307MEDIUMA memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to causeEPSS 0.4%CVE-2025-26308MEDIUMA memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a EPSS 0.4%CVE-2022-22168MEDIUMJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootEPSS 0.4%CVE-2025-26311MEDIUMMultiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in utiEPSS 0.4%CVE-2025-1992MEDIUMIBM Db2 denial of serviceEPSS 0.4%CVE-2026-120678HIGHMongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)EPSS 0.4%CVE-2025-47150HIGHF5OS SNMP vulnerabilityEPSS 0.4%CVE-2023-23145HIGHGPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.EPSS 0.4%CVE-2025-14027HIGHRockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XTEPSS 0.4%CVE-2021-1597MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2021-1596MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%CVE-2023-25399MEDIUMA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This EPSS 0.4%CVE-2021-1595MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesEPSS 0.4%