CWE-404— Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.— MITRE CWE catalog

828 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-404page 17 of 17

CVE-2026-90802MEDIUMCVSS 4.4EG 4.4
2026-09-14
A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has bee…
CVE-2026-90816MEDIUMCVSS 4.3EG 4.3
2026-09-14
A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial o…
CVE-2026-90828MEDIUMCVSS 5.3EG 5.3
2026-09-14
A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer d…
CVE-2026-90829MEDIUMCVSS 5.3EG 5.3
2026-09-14
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference…
CVE-2026-90830MEDIUMCVSS 5.3EG 5.3
2026-09-14
A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack need…
CVE-2026-90878MEDIUMCVSS 4.3EG 4.3
2026-09-15
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource cons…
CVE-2026-91779LOWCVSS 3.3EG 3.3
2026-09-15
A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer derefe…
CVE-2026-91780LOWCVSS 3.3EG 3.3
2026-09-15
A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. T…
CVE-2026-91781LOWCVSS 3.3EG 3.3
2026-09-15
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereferen…
CVE-2026-91782LOWCVSS 3.3EG 3.3
2026-09-15
A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null point…
CVE-2026-91855MEDIUMCVSS 5.3EG 5.3
2026-09-15
A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Message Handler. Performing a manipulation results in denial of ser…
CVE-2026-92220MEDIUMCVSS 5.3EG 5.3
2026-09-16
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper._handle_release_message of the file vllm/distributed/kv_trans…
CVE-2026-92356MEDIUMCVSS 4.3EG 4.3
2026-09-16
A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. T…
CVE-2026-92361MEDIUMCVSS 4.3EG 4.3
2026-09-16
A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. T…
CVE-2026-92362HIGHCVSS 7.3EG 7.3
2026-09-16
A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack …
CVE-2026-92363MEDIUMCVSS 4.3EG 4.3
2026-09-16
A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sse_parser.cpp of the component JSON Parser. Executing a manipulation can lead to resource consumption. The attack may be performed f…
CVE-2026-92365MEDIUMCVSS 4.3EG 4.3
2026-09-16
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is po…
CVE-2026-92413MEDIUMCVSS 4.3EG 4.3
2026-09-16
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can …
CVE-2026-92417MEDIUMCVSS 6.5EG 6.5
2026-09-16
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack m…
CVE-2026-92879MEDIUMCVSS 4.3EG 4.3
2026-09-17
A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is ide…
CVE-2026-92881MEDIUMCVSS 4.3EG 4.3
2026-09-17
A security vulnerability has been detected in vgmstream. The affected element is the function init_vgmstream_awb_memory of the file src/meta/awb.c of the component AWB parser. Such manipulation leads to divide by zero. The attack can be ex…
CVE-2026-93312MEDIUMCVSS 4.3EG 4.3
2026-09-18
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The e…
CVE-2026-9358MEDIUMCVSS 4.3EG 4.3
2026-05-24
A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled rec…
CVE-2026-9503LOWCVSS 3.3EG 3.3
2026-05-25
A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be …
CVE-2026-9529LOWCVSS 3.3EG 3.3
2026-05-26
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. …
CVE-2026-9540MEDIUMCVSS 5.3EG 5.3
2026-05-26
A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. It is possible to launch the attack remot…
CVE-2026-9567LOWCVSS 3.3EG 3.3
2026-05-26
A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isom_intern.c of the component MP4Box. The manipulation results in null pointer dereference. The attack needs to be ap…
CVE-2026-9572MEDIUMCVSS 5.5EG 5.5
2026-05-26
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of the argument cat leads to memory leak. Th…

Map vulnerabilities like CWE-404 to your infrastructure

EchelonGraph correlates every CVE — across CWE-404 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →