Weaknesses of type CWE-835

532 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2024-6227HIGHInfinite Loop in aimhubio/aimEPSS 0.6%CVE-2026-59879HIGHImmutable.js `List` 32-bit trie overflow → unrecoverable DoSEPSS 0.6%CVE-2026-20154HIGHCisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of ServiceEPSS 0.6%CVE-2026-6668HIGHInteger overflow causes an infinite loop in packet buffer growth in PgBouncerEPSS 0.6%CVE-2023-36807MEDIUMInfinite Loop when reading malformed objects in pypdfEPSS 0.6%CVE-2026-112406HIGHPillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycleEPSS 0.6%CVE-2024-25144MEDIUMThe IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 beforeEPSS 0.6%CVE-2025-2962HIGHInfinite loop in dns_copy_qnameEPSS 0.6%CVE-2026-59843MEDIUMLibssh: libssh: denial of service via zero advertised channel packet sizeEPSS 0.6%CVE-2025-13335MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.6%CVE-2026-78250MEDIUMbytebot-ai bytebot Agent Execution Workflow infinite loopEPSS 0.6%CVE-2026-6985MEDIUMCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loopEPSS 0.6%CVE-2026-4598HIGHVersions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInEPSS 0.6%CVE-2023-25653HIGHImproper calculations in ECC implementation can trigger a Denial-of-Service (DoS)EPSS 0.6%CVE-2025-71397HIGHSurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopsEPSS 0.6%CVE-2026-16931HIGHIBM i is Affected By A Denial of Service Vulnerability []EPSS 0.5%CVE-2026-17229HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.5%CVE-2026-78543MEDIUMIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEsEPSS 0.5%CVE-2026-17004HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.5%CVE-2025-0673HIGHLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.5%