Weaknesses of type CWE-835

426 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2020-14394—An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) EPSS 0.4%CVE-2025-27497HIGHOpenDJ Denial of Service (Dos) using alias loopEPSS 0.4%CVE-2026-13401HIGHXML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributesEPSS 0.4%CVE-2025-29776HIGHAzle calling `setTimer` causes infinite loop of timersEPSS 0.4%CVE-2025-0290MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.4%CVE-2021-20257—An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in procEPSS 0.4%CVE-2024-6614MEDIUMIncorrect listing of stack framesEPSS 0.4%CVE-2025-55118HIGHBMC Control-M/Agent memory corruption in SSL/TLS communicationEPSS 0.4%CVE-2026-91952HIGHFreeRDP before 3.31.0 Denial of Service via pool_decode_rectEPSS 0.4%CVE-2026-68762MEDIUMIn JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleEPSS 0.4%CVE-2025-66252HIGHInfinite Loop Denial of Service via Failed File DeletionEPSS 0.4%CVE-2024-58261LOWThe sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" mesEPSS 0.4%CVE-2023-36464MEDIUMInfinite Loop when a comment isn't followed by a character in pypdfEPSS 0.4%CVE-2024-6061MEDIUMGPAC MP4Box isoffin_read.c isoffin_process infinite loopEPSS 0.4%CVE-2026-26066MEDIUMImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profileEPSS 0.4%CVE-2024-23352HIGHLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call ProcessorEPSS 0.3%CVE-2026-26283MEDIUMImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`EPSS 0.3%CVE-2026-27114MEDIUMNanaZip has ROMFS Archive Infinite LoopEPSS 0.3%CVE-2026-61633LOWNanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoSEPSS 0.3%CVE-2025-51986HIGHAn issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loEPSS 0.3%