Weaknesses of type CWE-369

222 results

Divisão por zero

Fraqueza em que o código tenta dividir um número por zero sem validação prévia, causando crash, exceção ou comportamento indefinido. O risco varia: em alguns casos gera apenas erro aritmético; em outros, permite negação de serviço ou exploração mais grave dependendo do contexto de execução.

Example

Uma API recebe um parâmetro do usuário, aplica-o diretamente como divisor sem checar se é zero: `resultado = 100 / parametro_do_usuario`. Se o atacante enviar 0, a aplicação quebra ou trava, indisponibilizando o serviço.

How to mitigate

Validar sempre o divisor antes de usá-lo: checar se é diferente de zero e rejeitar ou tratar o caso com valor padrão. Em linguagens modernas, usar exceptions tipadas e logging para sinalizar tentativas suspeitas.

CVE-2026-31884MEDIUMFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0EPSS 0.3%CVE-2026-105250MEDIUMvgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zeroEPSS 0.3%CVE-2025-71002MEDIUMA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2025-71006MEDIUMA floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via EPSS 0.3%CVE-2023-4678MEDIUMDivide By Zero in gpac/gpacEPSS 0.3%CVE-2026-6683MEDIUMFatFs Divide-by-Zero in exFAT SyncEPSS 0.3%CVE-2021-3941—In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * YEPSS 0.3%CVE-2026-24826CRITICALOut-of-bounds write in turso3dEPSS 0.3%CVE-2022-3061—Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver EPSS 0.3%CVE-2023-2662LOWDivide-by-zero in Xpdf 4.04 due to bad color space objectEPSS 0.3%CVE-2026-64951LOWVelociraptor DoS triggered by Divide by Zero panicEPSS 0.3%CVE-2026-110605MEDIUMlibschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_lineEPSS 0.3%CVE-2022-41287LOWA vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), TeamcenEPSS 0.3%CVE-2025-71005MEDIUMA floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a cEPSS 0.3%CVE-2022-49294MEDIUMdrm/amd/display: Check if modulo is 0 before dividing.EPSS 0.3%CVE-2024-50233MEDIUMstaging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()EPSS 0.3%CVE-2026-5747HIGHOut-of-bounds Write in Firecracker virtio-pci TransportEPSS 0.3%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2024-57922MEDIUMdrm/amd/display: Add check for granularity in dml ceil/floor helpersEPSS 0.3%CVE-2024-50287MEDIUMmedia: v4l2-tpg: prevent the risk of a division by zeroEPSS 0.3%