Falhas do tipo CWE-772

139 resultados

Vazamento de recurso por falta de liberação

Ocorre quando o código adquire um recurso (memória, arquivo, conexão, handle) e nunca o libera explicitamente, mesmo após não precisar mais dele. O recurso fica ocupado indefinidamente, consumindo memória ou limitando a capacidade do sistema até causar esgotamento e falha de serviço.

Exemplo

Uma função abre um arquivo com fopen() para ler dados, processa o conteúdo, mas retorna sem chamar fclose(). Se a função for chamada repetidamente (ou em caso de exceção antes do close), os descritores de arquivo se acumulam até o limite do SO ser atingido e nenhum arquivo poder ser aberto.

Como mitigar

Use blocos try-finally ou defer (em Go) para garantir liberação mesmo em caso de erro. Em C++/Java, prefira RAII e garbage collection. Implemente análise estática e testes de vazamento com ferramentas como Valgrind, AddressSanitizer ou verificadores de SonarQube.

CVE-2025-64734LOWMissing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to peEPSS 0.2%CVE-2026-95108MEDIUMDeleting a user-mode module thread leaks its privileged kernel stackEPSS 0.2%CVE-2026-45287LOWOpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parseEPSS 0.2%CVE-2026-102723HIGHNULL Pointer Dereference on MSRP Attribute Table ExhaustionEPSS 0.2%CVE-2025-0036LOWIn AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause dEPSS 0.2%CVE-2026-23185HIGHwifi: iwlwifi: mld: cancel mlo_scan_start_wkEPSS 0.1%CVE-2026-46201HIGHdrm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()EPSS 0.1%CVE-2026-45536MEDIUMNetty: Unix-socket fd receive leaks descriptors when peer sends two at onceEPSS 0.1%CVE-2023-47216LOWLiteos-A has a missing release of resource vulnerabilityEPSS 0.1%CVE-2025-54983MEDIUMHealth check port on ZCC allows tunnel bypassEPSS 0.1%CVE-2026-46178HIGHRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()EPSS 0.1%CVE-2026-104045MEDIUMSssd: sssd: denial of service via race condition in autofs responderEPSS 0.1%CVE-2026-104112MEDIUMMissing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memoryEPSS 0.1%CVE-2026-114236LOWPodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersEPSS 0.1%CVE-2026-19740MEDIUMBluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedureEPSS 0.1%CVE-2026-19739MEDIUMBluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection UpdateEPSS 0.1%CVE-2026-97686MEDIUMVxWorks 7 Memory Resource leakEPSS 0.1%CVE-2026-104031MEDIUMSssd: sssd: denial of service via memory exhaustion in autofs responderEPSS 0.1%CVE-2026-104035MEDIUMSssd: sssd: denial of service via memory exhaustion in kcm responderEPSS 0.1%