Weaknesses of type CWE-754

507 results

Falta de tratamento de condições excepcionais

O código não valida ou valida incorretamente situações anormais que raramente ocorrem durante a operação normal do sistema. Isso deixa o software vulnerável quando essas condições inesperadas finalmente acontecem — erros silenciosos, comportamentos indefinidos ou falhas de segurança podem ser explorados ou danificar a aplicação.

Example

Um servidor web processa uploads e assume que a pasta temporária sempre terá espaço disponível, sem checar se o disco está cheio. Quando o espaço acaba, o código falha silenciosamente, deixando requisições pendentes ou corrompidas, ou causando denial of service.

How to mitigate

Implemente validações explícitas para cenários fora do caminho feliz: verificar retornos de erro de chamadas de sistema (create, malloc, fopen), definir timeouts, validar limites de recursos e registrar falhas excepcionais com logging adequado. Trate toda exceção esperada, mesmo que rara.

CVE-2026-4694HIGHIncorrect boundary conditions, integer overflow in the Graphics componentEPSS 0.8%CVE-2022-27563HIGHOverload/denial of service affects HCL VersionVault ExpressEPSS 0.8%CVE-2026-56812MEDIUMPhoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiffEPSS 0.8%CVE-2022-21737MEDIUMAssertion failure based denial of service in TensorflowEPSS 0.8%CVE-2026-20419MEDIUMIn wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/EPSS 0.8%CVE-2026-0227MEDIUMPAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalEPSS 0.7%CVE-2024-34360HIGHPrevious ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATXEPSS 0.7%CVE-2026-4686HIGHIncorrect boundary conditions in the Graphics: Canvas2D componentEPSS 0.7%CVE-2026-4697HIGHIncorrect boundary conditions in the Audio/Video: Web Codecs componentEPSS 0.7%CVE-2024-53916HIGHIn OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the pEPSS 0.7%CVE-2026-4685HIGHIncorrect boundary conditions in the Graphics: Canvas2D componentEPSS 0.7%CVE-2026-4695HIGHIncorrect boundary conditions in the Audio/Video: Web Codecs componentEPSS 0.7%CVE-2026-4693HIGHIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.7%CVE-2026-4699HIGHIncorrect boundary conditions in the Layout: Text and Fonts componentEPSS 0.7%CVE-2024-53432HIGHWhile parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at. EPSS 0.7%CVE-2022-22235MEDIUMJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedEPSS 0.7%CVE-2021-0225MEDIUMJunos OS Evolved: Stateless IP firewall filter does not work as expectedEPSS 0.7%CVE-2024-32867MEDIUMSuricata's defrag contains various issues leading to policy bypassEPSS 0.7%CVE-2024-51470MEDIUMIBM MQ denial of serviceEPSS 0.7%CVE-2024-21614HIGHJunos OS and Junos OS Evolved: A specific query via DREND causes rpd crashEPSS 0.7%