Weaknesses of type CWE-617

557 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2021-43849MEDIUMDoS vulnerabilityEPSS 0.3%CVE-2022-2719MEDIUMIn ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NUEPSS 0.3%CVE-2026-107838HIGHRIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertionEPSS 0.3%CVE-2026-92160MEDIUMF´: SendPartial Integer Overflow Leading to Assertion DoSEPSS 0.3%CVE-2023-31918MEDIUMJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parserEPSS 0.3%CVE-2023-31916MEDIUMJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.EPSS 0.3%CVE-2023-31919MEDIUMJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jconEPSS 0.3%CVE-2023-31913MEDIUMJerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/jsEPSS 0.3%CVE-2025-56568HIGHAssertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of OpeEPSS 0.3%CVE-2026-30867MEDIUMCocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet ParsingEPSS 0.3%CVE-2025-27066HIGHReachable Assertion in WLAN FirmwareEPSS 0.3%CVE-2026-121409HIGHFreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing TokenEPSS 0.3%CVE-2023-38471MEDIUMReachable assertion in dbus_set_host_nameEPSS 0.3%CVE-2023-31920MEDIUMJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.EPSS 0.3%CVE-2024-25445HIGHImproper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure.EPSS 0.3%CVE-2026-15893MEDIUMZephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoSEPSS 0.3%CVE-2026-109946HIGHFreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region WidthEPSS 0.3%CVE-2026-109678HIGHFreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusAEPSS 0.3%CVE-2024-7139MEDIUMDenial of Service in Silicon Labs RS9116 Bluetooth SDKEPSS 0.3%CVE-2023-33095HIGHReachable Assertion in Multi-Mode Call ProcessorEPSS 0.3%