Weaknesses of type CWE-369

222 results

Divisão por zero

Fraqueza em que o código tenta dividir um número por zero sem validação prévia, causando crash, exceção ou comportamento indefinido. O risco varia: em alguns casos gera apenas erro aritmético; em outros, permite negação de serviço ou exploração mais grave dependendo do contexto de execução.

Example

Uma API recebe um parâmetro do usuário, aplica-o diretamente como divisor sem checar se é zero: `resultado = 100 / parametro_do_usuario`. Se o atacante enviar 0, a aplicação quebra ou trava, indisponibilizando o serviço.

How to mitigate

Validar sempre o divisor antes de usá-lo: checar se é diferente de zero e rejeitar ou tratar o caso com valor padrão. Em linguagens modernas, usar exceptions tipadas e logging para sinalizar tentativas suspeitas.

CVE-2025-55642MEDIUMGPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process function (isomedia/isom_write.c).EPSS 0.5%CVE-2026-67302MEDIUMFreeRDP rdpecam StartStreamsRequest divide-by-zero denial of serviceEPSS 0.5%CVE-2026-25169MEDIUMWindows Graphics Component Denial of Service VulnerabilityEPSS 0.5%CVE-2023-38675MEDIUMFPE in paddle.linalg.matrix_rankEPSS 0.5%CVE-2023-52313MEDIUMFPE in paddle.argmin and paddle.argmaxEPSS 0.5%CVE-2023-38677MEDIUMFPE in paddle.linalg.eigEPSS 0.5%CVE-2023-52305MEDIUMFPE in paddle.topkEPSS 0.5%CVE-2023-52308MEDIUMFPE in paddle.aminEPSS 0.5%CVE-2023-38674MEDIUMFPE in paddle.nanmedianEPSS 0.5%CVE-2023-52306MEDIUMFPE in paddle.lerpEPSS 0.5%CVE-2026-20057MEDIUMCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service VulnerabilityEPSS 0.5%CVE-2025-4637HIGHDivide By Zero in dlibEPSS 0.5%CVE-2022-35996MEDIUMFloating point exception in `Conv2D` in TensorFlowEPSS 0.5%CVE-2021-33844—A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wavEPSS 0.5%CVE-2026-35215HIGHFirebird: DoS via malicious slice descriptor in slice packetEPSS 0.5%CVE-2026-107159HIGHMiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX HeaderEPSS 0.5%CVE-2021-23210—A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted EPSS 0.5%CVE-2024-4785HIGHBT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by ZeroEPSS 0.5%CVE-2023-1127HIGHDivide By Zero in vim/vimEPSS 0.5%CVE-2024-57598MEDIUMA floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp wEPSS 0.5%