Weaknesses of type CWE-617

460 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2023-33044HIGHReachable Assertion in Data ModemEPSS 0.5%CVE-2024-50613MEDIUMlibsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.EPSS 0.5%CVE-2026-12617HIGHRecord ordering based unexpected exit with CNAME or DNAMEEPSS 0.5%CVE-2024-42644HIGHFlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS EPSS 0.5%CVE-2024-42645HIGHAn issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of ServEPSS 0.5%CVE-2023-37011MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.5%CVE-2023-37010MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.5%CVE-2023-37009MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.5%CVE-2026-92971HIGHInternLM LMDeploy through 0.17.0 Assertion Denial of ServiceEPSS 0.5%CVE-2024-24428HIGHA reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafEPSS 0.5%CVE-2022-36004MEDIUM`CHECK` fail in `tf.random.gamma` in TensorFlowEPSS 0.5%CVE-2022-35988MEDIUM`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlowEPSS 0.5%CVE-2022-35997MEDIUM`CHECK` fail in `tf.sparse.cross` in TensorFlowEPSS 0.5%CVE-2026-44435HIGHQuicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KBEPSS 0.5%CVE-2022-35998MEDIUM`CHECK` fail in `EmptyTensorList` in TensorFlowEPSS 0.5%CVE-2026-80274HIGHValidating resolver can abort while caching a mismatched NOQNAME proofEPSS 0.5%CVE-2026-76163HIGHnamed aborts on a TKEY query when the user configuration has no global options statementEPSS 0.5%CVE-2022-35934MEDIUM`CHECK` failure in tf.reshape in TensorflowEPSS 0.5%CVE-2022-36001MEDIUM`CHECK` fail in `DrawBoundingBoxes` in TensorFlowEPSS 0.5%CVE-2022-35999MEDIUM`CHECK` fail in `Conv2DBackpropInput` in TensorFlowEPSS 0.5%