Weaknesses of type CWE-835

426 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2026-45820MEDIUMfflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory EPSS 0.5%CVE-2026-54623HIGHdjango CMS: Plugin move endpoint allows cyclic reparenting (DoS)EPSS 0.5%CVE-2026-87013MEDIUMOpen WebUI: Any authenticated user can start a non-terminating request via a folder parent cycleEPSS 0.5%CVE-2024-11941HIGHDrupal core - Moderately critical - Denial of Service - SA-CORE-2024-001EPSS 0.5%CVE-2026-56852HIGHInfinite loop on invalid input in golang.org/x/textEPSS 0.5%CVE-2024-45395LOWUnbounded loop over untrusted input can lead to endless data attackEPSS 0.5%CVE-2026-82579MEDIUMAshAi tool loop never terminates when all tool calls are filtered out, enabling denial of serviceEPSS 0.5%CVE-2026-49017HIGHIn OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request boEPSS 0.5%CVE-2022-28886MEDIUMDenial-of-Service (DoS) VulnerabilityEPSS 0.5%CVE-2023-4511MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.5%CVE-2026-44302HIGHSnappier: Infinite loop in SnappyStream decompression on malformed framed inputEPSS 0.5%CVE-2025-53628MEDIUMcpp-httplib does not limit the length of a lineEPSS 0.5%CVE-2026-11932MEDIUMSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.5%CVE-2026-59901HIGHNetty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread HangEPSS 0.5%CVE-2026-42920HIGHBIG-IP DTLS VulnerabilityEPSS 0.5%CVE-2021-3416—A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issEPSS 0.5%CVE-2019-3819MEDIUMA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite looEPSS 0.5%CVE-2026-70462HIGHrsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUTEPSS 0.5%CVE-2026-55865HIGHPython Liquid: Infinite loop when parsing malformed `{% case %}` tagsEPSS 0.5%CVE-2026-24688MEDIUMpypdf has possible Infinite Loop when processing outlines/bookmarksEPSS 0.5%