Weaknesses of type CWE-617

461 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2023-3301MEDIUMTriggerable assertion due to race condition in hot-unplugEPSS 0.3%CVE-2026-82059MEDIUMImproper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of ServiceEPSS 0.3%CVE-2026-41585MEDIUMZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated ClientsEPSS 0.3%CVE-2026-18707MEDIUMImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of ServiceEPSS 0.3%CVE-2026-33977MEDIUMFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)EPSS 0.3%CVE-2026-27015MEDIUMFreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)EPSS 0.3%CVE-2026-52131HIGHllama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.EPSS 0.3%CVE-2026-79379MEDIUMA buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed EPSS 0.3%CVE-2024-23385HIGHReachable Assertion in ModemEPSS 0.3%CVE-2026-25610HIGHInvalid $geoNear index hint may cause server crashEPSS 0.3%CVE-2025-20757MEDIUMIn Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecEPSS 0.2%CVE-2026-67303MEDIUMFreeRDP before 3.29.0 Denial of Service via serial DeviceControlEPSS 0.2%CVE-2024-34034MEDIUMAn issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertionEPSS 0.2%CVE-2024-34035MEDIUMAn issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with EPSS 0.2%CVE-2025-20752MEDIUMIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connectedEPSS 0.2%CVE-2025-20791MEDIUMIn Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connectEPSS 0.2%CVE-2026-34066MEDIUMnimiq-blockchain: Peer-triggerable panic during history syncEPSS 0.2%CVE-2025-60632MEDIUMAn issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_EPSS 0.2%CVE-2026-63140MEDIUMReachable Assertion in Elasticsearch Leading to Denial of ServiceEPSS 0.2%CVE-2025-48020MEDIUMA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciouEPSS 0.2%