CWE-404

Medium likelihood

Improper Resource Shutdown or Release

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not release or incorrectly releases a resource before it is made available for re-use.

722 vulnerabilities with CWE-404
CVE-2026-2525 MEDIUM
free5gc < 4.1.0 - Denial of Service in PFCP UDP Endpoint
CVSS 5.3
CVE-2026-2524 MEDIUM
Open5GS 2.7.6 - Denial of Service in MME S11 Create Session Response Handler
CVSS 5.3
CVE-2026-2517 MEDIUM
Open5GS < 2.7.6 - Denial of Service via TFT Length Manipulation in SMF
CVSS 5.3
CVE-2026-2108 MEDIUM
jsbroks COCO Annotator <0.11.1 - DoS
CVSS 5.3
CVE-2026-2062 MEDIUM
Open5GS <2.7.6 - Null Pointer Dereference
CVSS 5.3
CVE-2026-1991 LOW
libuvc <0.0.7 - Null Pointer Dereference
CVSS 3.3
CVE-2026-1990 LOW
oatpp <1.3.1 - Null Pointer Dereference
CVSS 3.3
CVE-2026-1976 MEDIUM
Free5GC <4.1.0 - Null Pointer Dereference
CVSS 5.3
CVE-2026-1975 MEDIUM
free5gc < 4.1.0 - Null Pointer Dereference in pfcp_reports.go identityTriggerType
CVSS 5.3
CVE-2026-1974 MEDIUM
free5gc < 4.1.0 - Denial of Service in SMF Node ID Resolution
CVSS 5.3
CVE-2026-1973 MEDIUM
Free5GC <4.1.0 - Null Pointer Dereference
CVSS 5.3
CVE-2026-1739 MEDIUM
Free5GC pcf <1.4.1 - Null Pointer Dereference
CVSS 5.3
CVE-2026-1684 MEDIUM
free5gc < 4.1.0 - Denial of Service via PFCP UDP Endpoint HandleReports Function
CVSS 5.3
CVE-2026-1683 MEDIUM
free5gc < 4.1.0 - Denial of Service in PFCP HandlePfcpSessionReportRequest
CVSS 5.3
CVE-2026-1682 MEDIUM
Free5GC SMF <4.1.0 - Null Pointer Dereference
CVSS 5.3
CVE-2026-1587 MEDIUM
open5gs < 2.7.6 - Denial of Service in SGWC S11 Handler
CVSS 5.3
CVE-2026-1586 MEDIUM
open5gs < 2.7.6 - Denial of Service in SGWC S11 Handler
CVSS 5.3
CVE-2026-1522 MEDIUM
open5gs < 2.7.6 - Denial of Service in SGWC S5C Handler
CVSS 5.3
CVE-2026-1521 MEDIUM
open5gs < 2.7.6 - Denial of Service in SGWC Bearer Resource Failure Indication Handler
CVSS 5.3
CVE-2026-1417 LOW
gpac < 2.4.0 - Null Pointer Dereference in dump_isom_rtp Function
CVSS 3.3
CVE-2026-1416 LOW
gpac < 2.4.0 - Null Pointer Dereference in DumpMovieInfo Function
CVSS 3.3
CVE-2026-1415 LOW
gpac < 2.4.0 - Null Pointer Dereference in gf_media_export_webvtt_metadata
CVSS 3.3
CVE-2026-21975 MEDIUM
Oracle Java VM 19.3-19.29 and 21.3-21.20 - Authenticated Denial of Service via Oracle Net
CVSS 4.5
CVE-2026-1174 MEDIUM
birkir prime < 0.4.0 - Uncontrolled Resource Consumption in GraphQL Alias Handler
CVSS 5.3
CVE-2026-1173 MEDIUM
birkir prime < 0.4.0 - Denial of Service in GraphQL Array Based Query Batch Handler
CVSS 5.3
Details
Vulnerabilities 722
Exploit Likelihood Medium