CWE-771 (对活跃已分配资源丧失索引) — Vulnerability Class 4

CWE-771 represents a memory management weakness where software fails to maintain a valid reference to an allocated resource, preventing its proper reclamation. This oversight typically leads to resource leaks, causing applications to consume increasing amounts of memory or system handles over time. Attackers exploit this vulnerability to induce denial-of-service conditions by exhausting system resources, thereby rendering the application or host machine unresponsive. Developers mitigate this risk by implementing rigorous resource lifecycle management, ensuring that every allocated entity is explicitly released or dereferenced when no longer needed. In languages lacking automatic garbage collection, manual tracking and deterministic cleanup are essential. Even in managed environments, developers must avoid holding unnecessary references to transient objects, ensuring the garbage collector can effectively identify and reclaim unused memory, thus maintaining system stability and performance.