Weaknesses of type CWE-662

17 results

Sincronização Inadequada Entre Threads

Ocorre quando múltiplas threads acessam e modificam dados compartilhados sem mecanismos de sincronização (locks, mutexes, ou operações atômicas). Isso causa race conditions onde o resultado final depende da ordem de execução das threads, levando a corrupção de dados, lógica quebrada ou comportamentos impredizíveis.

Example

Um contador global é incrementado por duas threads simultaneamente sem proteção: ambas leem o valor 5, incrementam para 6, e escrevem 6 de volta — resultado esperado era 7. Em um servidor web, isso pode deixar sessões inconsistentes ou estados de autenticação corrompidos.

How to mitigate

Use primitivas de sincronização apropriadas (mutex, semáforo, operações atômicas) para proteger seções críticas. Em linguagens modernas, prefira estruturas thread-safe (ConcurrentHashMap em Java, canais em Go) e evite compartilhamento desnecessário de estado mutável entre threads.

CVE-2024-7409HIGHQemu: denial of service via improper synchronization in qemu nbd server during socket closureEPSS 1.0%CVE-2024-32644CRITICALEvmos' transaction execution not accounting for all state transition after interaction with precompilesEPSS 0.9%CVE-2026-39865MEDIUMAxios HTTP/2 Session Cleanup State Corruption VulnerabilityEPSS 0.7%CVE-2025-27104LOWdouble eval in For List Iter in VyperEPSS 0.4%CVE-2026-28789HIGHOliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handlingEPSS 0.4%CVE-2026-13489LOW78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronizationEPSS 0.2%CVE-2022-32643MEDIUMIn ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.2%CVE-2025-22853LOWImproper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege viaEPSS 0.1%CVE-2022-32642MEDIUMIn ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioEPSS 0.1%CVE-2022-32610MEDIUMIn vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2022-32609MEDIUMIn vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2022-32644MEDIUMIn vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2022-32648MEDIUMIn disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2023-20611MEDIUMIn gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2023-20610MEDIUMIn display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2023-20607MEDIUMIn ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioEPSS 0.1%CVE-2023-20625MEDIUMIn adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution priEPSS 0.1%