Weaknesses of type CWE-703

181 results

Tratamento inadequado de condições de erro

Quando o código não verifica ou trata corretamente situações anormais (erros, exceções, valores inesperados), ele pode se comportar de forma impredizível ou insegura. O programa segue um caminho que não deveria, ignorando sinais de falha que poderiam evitar consequências maiores.

Example

Um serviço lê um arquivo de configuração sem verificar se a leitura falhou; se o arquivo não existir, as variáveis ficam vazias ou com lixo de memória, e o programa usa valores inválidos em decisões críticas de segurança, abrindo brechas para ataques.

How to mitigate

Sempre capture e trate exceções explicitamente, valide retornos de função (códigos de erro, null, valores fora do escopo), e log eventos anômalos. Implemente fallbacks sensatos e recuse operações quando o estado não for confiável.

CVE-2022-0016HIGHGlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before LogonEPSS 0.2%CVE-2025-12890MEDIUMBluetooth: peripheral: Invalid handling of malformed connection requestEPSS 0.2%CVE-2024-51491LOWProcess crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-goEPSS 0.2%CVE-2024-0092MEDIUMCVEEPSS 0.2%CVE-2026-65368MEDIUMA logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.EPSS 0.2%CVE-2026-21493MEDIUMiccDEV has Type Confusion during XML Curve SerializationEPSS 0.2%CVE-2025-58758MEDIUMTinyEnv: Missing .env file not required — may cause unexpected behaviorEPSS 0.2%CVE-2026-20640MEDIUMAn inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacEPSS 0.2%CVE-2026-31793MEDIUMiccDEV has a SEGV in CIccCalculatorFunc::ApplySequence()EPSS 0.2%CVE-2026-31794MEDIUMiccDEV has a SEGV in CIccCLUT::Interp3d()EPSS 0.2%CVE-2026-29643HIGHXiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper EPSS 0.2%CVE-2026-0011HIGHIn enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the codeEPSS 0.1%CVE-2025-43296MEDIUMA logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.EPSS 0.1%CVE-2026-38763MEDIUMAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828EPSS 0.1%CVE-2026-54610LOWLibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handlingEPSS 0.1%CVE-2021-25335LOWImproper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated useEPSS 0.1%CVE-2021-25409—Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification EPSS 0.1%CVE-2025-26456MEDIUMIn multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This coulEPSS 0.1%CVE-2025-22413MEDIUMIn multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local infEPSS 0.1%CVE-2023-21026MEDIUMIn updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to aEPSS 0.1%