Weaknesses of type CWE-617

557 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2023-43523HIGHReachable Assertion in WLAN FirmwareEPSS 0.3%CVE-2024-7139MEDIUMDenial of Service in Silicon Labs RS9116 Bluetooth SDKEPSS 0.3%CVE-2023-33096HIGHReachable Assertion in Multi-Mode Call ProcessorEPSS 0.3%CVE-2026-9748HIGH$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries inputEPSS 0.3%CVE-2026-109350HIGHGitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base DistanceEPSS 0.3%CVE-2023-38470MEDIUMReachable assertion in avahi_escape_labelEPSS 0.3%CVE-2023-38472MEDIUMReachable assertion in avahi_rdata_parseEPSS 0.3%CVE-2023-38473MEDIUMReachable assertion in avahi_alternative_host_nameEPSS 0.3%CVE-2023-38469MEDIUMReachable assertion in avahi_dns_packet_append_recordEPSS 0.3%CVE-2026-34067LOWnimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatchEPSS 0.3%CVE-2026-121396MEDIUMFreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertionEPSS 0.3%CVE-2026-8674MEDIUMAssertion failure in the DNS stub resolver with a long search domainEPSS 0.3%CVE-2025-49088MEDIUMPexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper InputEPSS 0.3%CVE-2026-85534MEDIUMLibsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body readEPSS 0.3%CVE-2026-75894HIGHReachable assertion at ranap_handle_co_dt()EPSS 0.3%CVE-2026-103108HIGHPexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a reEPSS 0.3%CVE-2026-103104HIGHPexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a reEPSS 0.3%CVE-2026-103099HIGHPexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a sEPSS 0.3%CVE-2025-48704HIGHPexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abortEPSS 0.3%CVE-2025-66443HIGHPexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation EPSS 0.3%