Falhas do tipo CWE-401

664 resultados

Fuga de memória - liberação não realizada após uso

Ocorre quando o código aloca memória (heap ou recursos) mas falha em liberá-la quando não é mais necessária. A memória fica presa no processo, reduzindo gradualmente a memória disponível até causar degradação de performance ou crash. É especialmente crítico em serviços que rodam indefinidamente (daemons, APIs, servidores).

Exemplo

Um servidor web que processa requisições sem liberar buffers de conexão fechada. Após milhares de requisições, acumula KB/MB de lixo na memória. Ou uma função que abre arquivo/socket e retorna sem chamar close() em todos os caminhos possíveis (incluindo exceções).

Como mitigar

Use padrões como RAII (Resource Acquisition Is Initialization) em C++, try-finally ou context managers em Python/Java, ou verificadores de vazamento (valgrind, AddressSanitizer). Revise especialmente blocos de exceção e retornos prematuros. Testes de longa duração ajudam a detectar fugas acumulativas.

CVE-2025-46686LOWRedis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs beEPSS 0.3%CVE-2022-49115MEDIUMPCI: endpoint: Fix misused goto labelEPSS 0.3%CVE-2026-24828HIGHMemory leak in is-EngineEPSS 0.3%CVE-2026-43506MEDIUMAn issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustionEPSS 0.3%CVE-2024-21613MEDIUMJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crashEPSS 0.3%CVE-2026-20746MEDIUMPingDirectory copying of virtual attributes leads to memory exhaustionEPSS 0.3%CVE-2026-46679HIGHlibp2p: Memory DoS via subscription flood of unique topicsEPSS 0.3%CVE-2022-45204MEDIUMGPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c.EPSS 0.3%CVE-2022-49277MEDIUMjffs2: fix memory leak in jffs2_do_mount_fsEPSS 0.3%CVE-2026-15892MEDIUMHeap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of serviceEPSS 0.3%CVE-2022-43151MEDIUMtimg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc.EPSS 0.3%CVE-2026-10774LOWPSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource-exhaustion DoSEPSS 0.3%CVE-2022-49648MEDIUMtracing/histograms: Fix memory leak problemEPSS 0.3%CVE-2021-4453MEDIUMdrm/amd/pm: fix a potential gpu_metrics_table memory leakEPSS 0.3%CVE-2022-49331MEDIUMnfc: st21nfca: fix memory leaks in EVT_TRANSACTION handlingEPSS 0.3%CVE-2025-66033MEDIUMImproper Memory Cleanup in the Okta Java SDKEPSS 0.3%CVE-2022-49627MEDIUMima: Fix potential memory leak in ima_init_crypto()EPSS 0.3%CVE-2022-46489MEDIUMGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.EPSS 0.3%CVE-2022-46490MEDIUMGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.EPSS 0.3%CVE-2022-49119MEDIUMscsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()EPSS 0.3%