Falhas do tipo CWE-401

664 resultados

Fuga de memória - liberação não realizada após uso

Ocorre quando o código aloca memória (heap ou recursos) mas falha em liberá-la quando não é mais necessária. A memória fica presa no processo, reduzindo gradualmente a memória disponível até causar degradação de performance ou crash. É especialmente crítico em serviços que rodam indefinidamente (daemons, APIs, servidores).

Exemplo

Um servidor web que processa requisições sem liberar buffers de conexão fechada. Após milhares de requisições, acumula KB/MB de lixo na memória. Ou uma função que abre arquivo/socket e retorna sem chamar close() em todos os caminhos possíveis (incluindo exceções).

Como mitigar

Use padrões como RAII (Resource Acquisition Is Initialization) em C++, try-finally ou context managers em Python/Java, ou verificadores de vazamento (valgrind, AddressSanitizer). Revise especialmente blocos de exceção e retornos prematuros. Testes de longa duração ajudam a detectar fugas acumulativas.

CVE-2021-47655MEDIUMmedia: venus: vdec: fixed possible memory leak issueEPSS 0.2%CVE-2021-47660MEDIUMfs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'EPSS 0.2%CVE-2025-30647HIGHJunos OS: MX Series: Subscriber login/logout activity will lead to a memory leakEPSS 0.2%CVE-2023-52936MEDIUMkernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()EPSS 0.2%CVE-2022-49102MEDIUMhabanalabs: fix possible memory leak in MMU DR finiEPSS 0.2%CVE-2024-56720HIGHbpf, sockmap: Several fixes to bpf_msg_pop_dataEPSS 0.2%CVE-2024-53198HIGHxen: Fix the issue of resource not being properly released in xenbus_dev_probe()EPSS 0.2%CVE-2023-23205MEDIUMAn issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.cEPSS 0.2%CVE-2024-50171MEDIUMnet: systemport: fix potential memory leak in bcm_sysport_xmit()EPSS 0.2%CVE-2023-1074MEDIUMA memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a maliciousEPSS 0.2%CVE-2024-56572LOWmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()EPSS 0.2%CVE-2024-53175MEDIUMipc: fix memleak if msg_init_ns failed in create_ipc_nsEPSS 0.2%CVE-2024-53105MEDIUMmm: page_alloc: move mlocked flag clearance into free_pages_prepare()EPSS 0.2%CVE-2022-49534MEDIUMscsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJTEPSS 0.2%CVE-2022-49231HIGHrtw88: fix memory overrun and memory leak during hw_scanEPSS 0.2%CVE-2023-33716MEDIUMmp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.EPSS 0.2%CVE-2026-91926LOWGss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeEPSS 0.2%CVE-2023-53315HIGHwifi: ath11k: Fix SKB corruption in REO destination ringEPSS 0.2%CVE-2026-78131LOWstrongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parseEPSS 0.2%CVE-2023-20251MEDIUMA vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attackeEPSS 0.2%