Weaknesses of type CWE-835

426 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2026-5407MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-54651MEDIUMpypdf: Possible infinite loop when processing threads/articles in writerEPSS 0.2%CVE-2026-55373MEDIUMOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsEPSS 0.2%CVE-2025-69647MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists dEPSS 0.2%CVE-2026-45271MEDIUMpicotls has infinite recursion in the minicrypto ASN.1 decoderEPSS 0.2%CVE-2024-6790MEDIUMMali GPU Kernel Driver can cause the whole system to become unresponsiveEPSS 0.2%CVE-2025-13946MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-46521MEDIUMImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compressionEPSS 0.1%CVE-2026-7771MEDIUMIBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceEPSS 0.1%CVE-2026-4179MEDIUMstm32: usb: Infinite while loop in Interrupt HandlerEPSS 0.1%CVE-2026-13002MEDIUMDnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsingEPSS 0.1%CVE-2026-0960MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-6523MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-6522MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-48986MEDIUMpam_usb: Infinite loop DoS in process-tree walk when parent process exits during authenticationEPSS 0.1%CVE-2026-6554MEDIUMinfinte loop in libpcap before 1.10.7EPSS 0.1%CVE-2026-55595MEDIUMImageMagick: Infinite Loop in connected-components when providing invalid argumentsEPSS 0.1%CVE-2026-48733MEDIUMImageMagick: Infinite Loop in subimage-search with crafted imageEPSS 0.1%CVE-2025-11626MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2025-27560MEDIUMLoop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service. SysteEPSS 0.1%