Weaknesses of type CWE-835

534 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2024-4854MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.8%CVE-2023-27560HIGHMath/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.EPSS 0.8%CVE-2026-110354HIGHHAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via aEPSS 0.8%CVE-2022-34760HIGHA CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserverEPSS 0.8%CVE-2026-66730HIGHfacil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body ParserEPSS 0.8%CVE-2025-32947HIGHPeerTube ActivityPub Crawl Infinite Loop DoSEPSS 0.8%CVE-2024-29904HIGHCodeIgniter4 Language class DoS VulnerabilityEPSS 0.8%CVE-2023-3748LOWInifinite loop in babld message parsing may cause dosEPSS 0.8%CVE-2026-4111HIGHLibarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveEPSS 0.8%CVE-2023-5825MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.8%CVE-2023-50981HIGHModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER pubEPSS 0.8%CVE-2025-8194HIGHTarfile infinite loop during parsing with negative member offsetEPSS 0.8%CVE-2022-34661MEDIUMA vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), TeamcenteEPSS 0.8%CVE-2024-53980MEDIUMSpoofed length byte traps CC2538 in endless loopEPSS 0.8%CVE-2026-47066HIGHInfinite loop in Alt-Svc header parser in hackneyEPSS 0.8%CVE-2024-32886MEDIUMVitess vulnerable to infinite memory consumption and vtgate crashEPSS 0.8%CVE-2022-39052HIGHDoS attack using emailEPSS 0.8%CVE-2025-20217HIGHCisco Firepower Threat Defense Intrusion Detection Denial of Service VulnerabilityEPSS 0.7%CVE-2026-107602HIGHKeycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loopEPSS 0.7%CVE-2024-10829HIGHDenial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptEPSS 0.7%