Falhas do tipo CWE-401

750 resultados

Fuga de memória - liberação não realizada após uso

Ocorre quando o código aloca memória (heap ou recursos) mas falha em liberá-la quando não é mais necessária. A memória fica presa no processo, reduzindo gradualmente a memória disponível até causar degradação de performance ou crash. É especialmente crítico em serviços que rodam indefinidamente (daemons, APIs, servidores).

Exemplo

Um servidor web que processa requisições sem liberar buffers de conexão fechada. Após milhares de requisições, acumula KB/MB de lixo na memória. Ou uma função que abre arquivo/socket e retorna sem chamar close() em todos os caminhos possíveis (incluindo exceções).

Como mitigar

Use padrões como RAII (Resource Acquisition Is Initialization) em C++, try-finally ou context managers em Python/Java, ou verificadores de vazamento (valgrind, AddressSanitizer). Revise especialmente blocos de exceção e retornos prematuros. Testes de longa duração ajudam a detectar fugas acumulativas.

CVE-2022-43222HIGHopen5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause aEPSS 1.0%CVE-2022-43221HIGHopen5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause aEPSS 1.0%CVE-2023-38380HIGHA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUEPSS 1.0%CVE-2023-6299MEDIUMApryse iText Reference Table PdfDocument.java memory leakEPSS 0.9%CVE-2021-23218MEDIUMMemory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of ServiceEPSS 0.9%CVE-2021-34598HIGHPhoenix Contact: FL MGUARD lack of memory release in remote logging functionalityEPSS 0.9%CVE-2022-22174HIGHJunos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packetsEPSS 0.9%CVE-2022-45920HIGHIn Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak.EPSS 0.9%CVE-2023-34451HIGHCometBFT may duplicate transactions in the mempool's data structuresEPSS 0.9%CVE-2020-27755—in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the propEPSS 0.9%CVE-2020-27753—There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a speciallyEPSS 0.9%CVE-2023-34450LOWCometBFT PeerState JSON serialization deadlockEPSS 0.9%CVE-2023-43076MEDIUM Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially eEPSS 0.8%CVE-2023-24511MEDIUMOn affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.EPSS 0.8%CVE-2022-22205HIGHJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenarioEPSS 0.8%CVE-2025-20133HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service VulnerabilityEPSS 0.8%CVE-2025-47935HIGHMulter vulnerable to Denial of Service via memory leaks from unclosed streamsEPSS 0.8%CVE-2023-22410HIGHJunos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.EPSS 0.8%CVE-2023-3592MEDIUMIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typEPSS 0.8%CVE-2023-28096MEDIUMOpenSIPS has memory leak in cJSON libEPSS 0.8%