Weaknesses of type CWE-617
557 resultsAsserção Acessível
É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.
Example
Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.
How to mitigate
Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).
CVE-2026-53532HIGHOpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)EPSS 0.4%CVE-2024-10455HIGHReachable Assertion in µD3TNEPSS 0.4%CVE-2025-24798MEDIUMMeshtastic crashes via an unimplemented routing module replyEPSS 0.4%CVE-2024-8361HIGHDoS caused due to wrong hash length returned for SHA2/224 algorithmEPSS 0.4%CVE-2024-50614MEDIUMTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterREPSS 0.4%CVE-2026-18697HIGHImproper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongosEPSS 0.4%CVE-2026-37223HIGHFlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher. The dispatcher validates incoming E2AP messages against a 9-enEPSS 0.4%CVE-2026-47145HIGHColor Control hue/saturation assertion abort in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47146HIGHColor Control color-temperature assertion abort in EmberZNet v9.0.2EPSS 0.4%CVE-2022-25673HIGHDenial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon MobileEPSS 0.4%CVE-2022-25702HIGHDenial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.4%CVE-2022-25689HIGHDenial of service in Modem due to reachable assertion in Snapdragon MobileEPSS 0.4%CVE-2022-25691HIGHDenial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon MobileEPSS 0.4%CVE-2022-25672HIGHDenial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon MobileEPSS 0.4%CVE-2022-25692HIGHDenial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, SEPSS 0.4%CVE-2026-52131HIGHllama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.EPSS 0.4%CVE-2026-109363HIGHZebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 TransactionEPSS 0.4%CVE-2025-41067HIGHReachable Assertion vulnerability in Open5GSEPSS 0.4%CVE-2026-102483HIGHReachable Assertion in ntpsecEPSS 0.4%CVE-2026-37222HIGHFlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages. A remote unauthenticated attaEPSS 0.4%