Weaknesses of type CWE-835

426 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2025-21850CRITICALnvmet: Fix crash when a namespace is disabledEPSS 0.4%CVE-2025-10903MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.4%CVE-2022-25742HIGHDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOEPSS 0.4%CVE-2026-80489MEDIUMEUC_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2022-33239HIGHTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, SnapdragEPSS 0.4%CVE-2026-78129MEDIUMstrongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.EPSS 0.4%CVE-2026-77117MEDIUMSHIFT_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2021-20255—A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while pEPSS 0.4%CVE-2022-25734HIGHLoop with Unreachable Exit Condition in MODEMEPSS 0.4%CVE-2026-47863MEDIUMReactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flushEPSS 0.4%CVE-2025-7054HIGHInfinite loop triggered by connection ID retirementEPSS 0.4%CVE-2026-6668HIGHInteger overflow causes an infinite loop in packet buffer growth in PgBouncerEPSS 0.4%CVE-2021-31363MEDIUMJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceEPSS 0.4%CVE-2026-20154HIGHCisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of ServiceEPSS 0.4%CVE-2025-42954LOWDenial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)EPSS 0.4%CVE-2025-20312HIGHA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attEPSS 0.4%CVE-2026-32739MEDIUMlibheif is Vulnerable to Infinite Loop DoS via stts Sample Duration LookupEPSS 0.4%CVE-2023-50763MEDIUMA vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX0EPSS 0.4%CVE-2025-69227MEDIUMAIOHTTP vulnerable to DoS when bypassing assertsEPSS 0.4%CVE-2020-14394—An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) EPSS 0.4%