Weaknesses of type CWE-617

559 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2025-7485MEDIUMOpen5GS SCTP Partial Message recv_handler assertionEPSS 0.2%CVE-2026-20422MEDIUMIn Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecEPSS 0.2%CVE-2024-7138MEDIUMDenial of Service in Silicon Labs RS9116 Bluetooth SDKEPSS 0.2%CVE-2026-20405MEDIUMIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connectedEPSS 0.2%CVE-2026-73438HIGHSecurity Advisory 0172EPSS 0.2%CVE-2025-52958MEDIUMJunos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crashEPSS 0.2%CVE-2025-48020MEDIUMA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciouEPSS 0.2%CVE-2024-34034MEDIUMAn issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertionEPSS 0.2%CVE-2024-34035MEDIUMAn issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with EPSS 0.2%CVE-2025-8698MEDIUMOpen5GS AMF Service nsmf-handler.c amf_nsmf_pdusession_handle_release_sm_context assertionEPSS 0.2%CVE-2026-9825LOWIBM Cyber Fraud Reachable AssertionEPSS 0.2%CVE-2025-21452HIGHReachable Assertion in ModemEPSS 0.2%CVE-2026-34066MEDIUMnimiq-blockchain: Peer-triggerable panic during history syncEPSS 0.2%CVE-2026-8843HIGHCalling createIndex with certain index types can crash mongodEPSS 0.2%CVE-2021-41200MEDIUMIncomplete validation in `tf.summary.create_file_writer`EPSS 0.2%CVE-2025-6952MEDIUMOpen5GS AMF Service amf-sm.c amf_state_operational assertionEPSS 0.2%CVE-2025-6273MEDIUMWebAssembly wabt binary-reader-objdump.cc LogOpcode assertionEPSS 0.2%CVE-2026-104005HIGHIncorrect authorization in MongoDB Server router for bulk writes to system namespacesEPSS 0.2%CVE-2026-96299HIGHMissing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of ServiceEPSS 0.2%CVE-2025-12131MEDIUMTruncated 802.15.4 packet leads to denial of serviceEPSS 0.2%