Weaknesses of type CWE-407

270 results

Complexidade algorítmica ineficiente

O código usa um algoritmo cuja complexidade temporal ou espacial é muito alta para os dados que processa, permitindo que um atacante cause negação de serviço alimentando entradas que forçam o pior caso de desempenho. Exemplos comuns são buscas lineares onde buscas binárias seriam apropriadas, ou regex catastrófico que explora backtracking excessivo.

Example

Um validador de email usando regex com grupos aninhados descontrola processamento CPU ao receber strings malformadas longas; ou um servidor que processa listas de dados com dois loops aninhados O(n²) quando n pode chegar a milhões, permitindo travar o serviço com uma requisição.

How to mitigate

Escolha estruturas de dados e algoritmos apropriados ao tamanho esperado dos dados (use hash maps em vez de arrays lineares, ordene antes de buscar). Para entradas não confiáveis, implemente timeouts, limite de tamanho de entrada e teste regex com ferramentas de detecção de backtracking.

CVE-2026-44378MEDIUMBotan: Quadratic complexity decoding BER indefinite length encodingsEPSS 0.3%CVE-2026-87721HIGHDenial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code ReviewEPSS 0.3%CVE-2026-113789MEDIUMpypdf: Possible long runtimes/large memory usage when retrieving form fieldsEPSS 0.3%CVE-2026-103604HIGHQuadratic-time escaping when converting X.509 distinguished names to stringsEPSS 0.3%CVE-2026-118664HIGHdecode-uri-component: Denial of service via quadratic replacement of percent-encoded runsEPSS 0.3%CVE-2026-84378MEDIUMHTTPX2: Quadratic SSE line buffering can cause CPU denial of serviceEPSS 0.3%CVE-2024-29916MEDIUMThe dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged kEPSS 0.3%CVE-2026-95112MEDIUMGitea issue reference parsing CPU exhaustionEPSS 0.3%CVE-2026-85494HIGHApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language)EPSS 0.3%CVE-2026-104426HIGHZebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value CheckEPSS 0.3%CVE-2026-122306HIGHKyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard MatchingEPSS 0.3%CVE-2026-109348MEDIUMGitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap ParsingEPSS 0.3%CVE-2026-118035HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingEPSS 0.3%CVE-2026-116267HIGHMIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested messageEPSS 0.3%CVE-2026-116270HIGHMIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewordsEPSS 0.3%CVE-2025-67841HIGHNordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.EPSS 0.3%CVE-2026-31932HIGHSuricata krb5: quadratic complexity in krb5 bufferingEPSS 0.3%CVE-2026-96292HIGHApache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)EPSS 0.3%CVE-2026-107287MEDIUMPydantic AI: Excessive resource use when local web fetching converts nested HTMLEPSS 0.3%CVE-2026-94653HIGHApache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)EPSS 0.3%