cve.bz

CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime

Filter

The product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.

What the weakness is: CWE-775 at MITRE. All weaknesses

Ask an AI about CWE-775

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/775.html and https://cve.bz/cve/cwe/775?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-103022EPSS 0.5%

    Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote…

  2. 5.3CVE-2026-110831EPSS 0.3%

    FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operatio…

  3. 5.3CVE-2026-106575EPSS 0.4%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust availabl…

  4. 7.9CVE-2026-78408EPSS 0.2%

    The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the…

  5. 2.1CVE-2026-45287EPSS 0.2%

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one file descriptor on each successful `ParseFile` call. `ParseFil…

  6. 6.9CVE-2019-25557EPSS 0.2%

    TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffe…

  7. 1.3CVE-2025-13751EPSS 0.2%

    Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

  8. 5.3CVE-2025-53476EPSS 0.5%

    A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modb…

  9. 7.5CVE-2024-24444EPSS 0.4%

    Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface.

  10. 7.5CVE-2017-8452EPSS 1.4%

    Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes.

  11. 7.8CVE-2016-8819EPSS 0.4%

    All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a handle to a kernel object may be returned to the user, leading to possible denial of servic…