Falhas do tipo CWE-401

664 resultados

Fuga de memória - liberação não realizada após uso

Ocorre quando o código aloca memória (heap ou recursos) mas falha em liberá-la quando não é mais necessária. A memória fica presa no processo, reduzindo gradualmente a memória disponível até causar degradação de performance ou crash. É especialmente crítico em serviços que rodam indefinidamente (daemons, APIs, servidores).

Exemplo

Um servidor web que processa requisições sem liberar buffers de conexão fechada. Após milhares de requisições, acumula KB/MB de lixo na memória. Ou uma função que abre arquivo/socket e retorna sem chamar close() em todos os caminhos possíveis (incluindo exceções).

Como mitigar

Use padrões como RAII (Resource Acquisition Is Initialization) em C++, try-finally ou context managers em Python/Java, ou verificadores de vazamento (valgrind, AddressSanitizer). Revise especialmente blocos de exceção e retornos prematuros. Testes de longa duração ajudam a detectar fugas acumulativas.

CVE-2022-49924MEDIUMnfc: fdp: Fix potential memory leak in fdp_nci_send()EPSS 0.2%CVE-2022-50372MEDIUMcifs: Fix memory leak when build ntlmssp negotiate blob failedEPSS 0.2%CVE-2023-53350MEDIUMaccel/qaic: Fix slicing memory leakEPSS 0.2%CVE-2022-49923MEDIUMnfc: nxp-nci: Fix potential memory leak in nxp_nci_send()EPSS 0.2%CVE-2026-53429MEDIUMUnbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of serviceEPSS 0.2%CVE-2023-21666HIGHImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsEPSS 0.2%CVE-2022-31222LOWDell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user coEPSS 0.2%CVE-2024-57872MEDIUMscsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()EPSS 0.2%CVE-2026-38819MEDIUMMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memoEPSS 0.2%CVE-2024-50254MEDIUMbpf: Free dynamically allocated bits in bpf_iter_bits_destroy()EPSS 0.2%CVE-2024-50190MEDIUMice: fix memleak in ice_init_tx_topology()EPSS 0.2%CVE-2024-56753MEDIUMdrm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 ModuleEPSS 0.2%CVE-2026-14697MEDIUMIPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of serviceEPSS 0.2%CVE-2022-23091MEDIUMMemory disclosure by stale virtual memory mappingEPSS 0.2%CVE-2022-29515MEDIUMMissing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privilegedEPSS 0.2%CVE-2026-33780HIGHJunos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldEPSS 0.2%CVE-2024-3860MEDIUMAn out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it woEPSS 0.2%CVE-2023-53008MEDIUMcifs: fix potential memory leaks in session setupEPSS 0.2%CVE-2023-53014MEDIUMdmaengine: tegra: Fix memory leak in terminate_all()EPSS 0.2%CVE-2022-50396MEDIUMnet: sched: fix memory leak in tcindex_set_parmsEPSS 0.2%