Weaknesses of type CWE-369

222 results

Divisão por zero

Fraqueza em que o código tenta dividir um número por zero sem validação prévia, causando crash, exceção ou comportamento indefinido. O risco varia: em alguns casos gera apenas erro aritmético; em outros, permite negação de serviço ou exploração mais grave dependendo do contexto de execução.

Example

Uma API recebe um parâmetro do usuário, aplica-o diretamente como divisor sem checar se é zero: `resultado = 100 / parametro_do_usuario`. Se o atacante enviar 0, a aplicação quebra ou trava, indisponibilizando o serviço.

How to mitigate

Validar sempre o divisor antes de usá-lo: checar se é diferente de zero e rejeitar ou tratar o caso com valor padrão. Em linguagens modernas, usar exceptions tipadas e logging para sinalizar tentativas suspeitas.

CVE-2026-6244MEDIUMdivision by zero in libpcap before 1.10.7EPSS 0.1%CVE-2026-36911MEDIUMA division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allEPSS 0.1%CVE-2026-42443LOWNanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculationEPSS 0.1%CVE-2026-16897MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2021-41209MEDIUMFPE in convolutions with zero size filtersEPSS 0.1%CVE-2021-41207MEDIUMDivision by zero in `ParallelConcat`EPSS 0.1%CVE-2021-37684MEDIUMDivision by zero in TensorFlow Lite pooling operationsEPSS 0.1%CVE-2026-10679LOWDivide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)EPSS 0.1%CVE-2026-85458LOWDivide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyphEPSS 0.1%CVE-2025-23273LOWNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error bEPSS 0.1%CVE-2021-41218MEDIUMInteger division by 0 in `tf.raw_ops.AllToAll`EPSS 0.1%CVE-2026-112013MEDIUMlibtta through 2.3 Divide by Zero via tta_decoder_init_get_infoEPSS 0.1%CVE-2026-68106HIGHdrm/amdgpu: fix division by zero with invalid uvd dimensionsEPSS 0.1%CVE-2026-21495MEDIUMDivision by Zero in iccDEV TIFF Image ReaderEPSS 0.1%CVE-2026-59959MEDIUMSAIL: WebP decoder division by zero through malformed animated canvas metadataEPSS 0.1%CVE-2026-47534MEDIUMNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a divide by EPSS 0.1%CVE-2026-10201MEDIUMAssimp UV Channel FBXExporter.cpp WriteObjects divide by zeroEPSS 0.1%CVE-2026-21996LOWAn unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in EPSS 0.1%CVE-2026-1653MEDIUMA potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenEPSS 0.1%CVE-2026-4603MEDIUMVersions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.jEPSS 0.1%