Weaknesses of type CWE-703

174 results

Tratamento inadequado de condições de erro

Quando o código não verifica ou trata corretamente situações anormais (erros, exceções, valores inesperados), ele pode se comportar de forma impredizível ou insegura. O programa segue um caminho que não deveria, ignorando sinais de falha que poderiam evitar consequências maiores.

Example

Um serviço lê um arquivo de configuração sem verificar se a leitura falhou; se o arquivo não existir, as variáveis ficam vazias ou com lixo de memória, e o programa usa valores inválidos em decisões críticas de segurança, abrindo brechas para ataques.

How to mitigate

Sempre capture e trate exceções explicitamente, valide retornos de função (códigos de erro, null, valores fora do escopo), e log eventos anômalos. Implemente fallbacks sensatos e recuse operações quando o estado não for confiável.

CVE-2024-9104MEDIUMUltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value CheckEPSS 0.3%CVE-2021-25525LOWImproper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFCEPSS 0.3%CVE-2025-68135MEDIUMEVerest's inadequate exception handling leads to denial of serviceEPSS 0.3%CVE-2024-25741MEDIUMprinter_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might EPSS 0.3%CVE-2024-20089HIGHIn wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additionEPSS 0.3%CVE-2023-28970MEDIUMJunos OS: JRR200: Kernel crash upon receipt of a specific packetEPSS 0.3%CVE-2023-28959MEDIUMJunos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packetsEPSS 0.3%CVE-2022-22224MEDIUMJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVEPSS 0.3%CVE-2023-36849MEDIUMJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is receivedEPSS 0.3%CVE-2021-25516MEDIUMAn improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locatioEPSS 0.3%CVE-2024-21593HIGHJunos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crashEPSS 0.3%CVE-2026-16218LOWhunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditionsEPSS 0.3%CVE-2023-36842MEDIUMJunos OS: jdhcpd will hang on receiving a specific DHCP packetEPSS 0.3%CVE-2026-20280HIGHCisco IOS XR Software Security Hardening Release: September 2026EPSS 0.3%CVE-2026-18638MEDIUMVelociraptor server crash via the SetPassword APIEPSS 0.3%CVE-2026-56818MEDIUMNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateEPSS 0.3%CVE-2025-65017HIGHDecidim's private data exports can lead to data leaksEPSS 0.3%CVE-2026-1996MEDIUMCertain HP OfficeJet Pro Printers – Denial of ServiceEPSS 0.3%CVE-2022-27841MEDIUMImproper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously runningEPSS 0.3%CVE-2026-80135HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check orEPSS 0.3%