Fallos del tipo CWE-369
208 resultadosDivisão por zero
Ocorre quando o código tenta dividir um número por zero, causando uma exceção ou comportamento indefinido que pode derrubar a aplicação ou ser explorado para negação de serviço. É uma validação de entrada ausente: o desenvolvedor não verifica se o divisor é zero antes da operação.
Ejemplo
Um endpoint que calcula a média de valores recebe um parâmetro 'quantidade' do usuário e faz resultado / quantidade sem validar se quantidade é zero. Um atacante envia quantidade=0 e a aplicação falha.
Cómo mitigar
Sempre validar que divisores não são zero antes da operação aritmética. Use condicionais simples (if divisor != 0) ou exceções bem tratadas para rejeitar entradas inválidas antes de chegar ao cálculo.
CVE-2026-37232HIGHAn issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The fuEPSS 0.4%CVE-2026-63117MEDIUMFreeRDP: Denial of service through ADPCM frame size calculationEPSS 0.4%CVE-2026-25799MEDIUMImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crashEPSS 0.4%CVE-2026-33593HIGHDenial of service via crafted DNSCrypt queryEPSS 0.4%CVE-2025-54873LOWRISC Zero Underconstrained Vulnerability: DivisionEPSS 0.4%CVE-2026-62431HIGHViridian STIMER division by zeroEPSS 0.4%CVE-2026-67302MEDIUMFreeRDP rdpecam StartStreamsRequest divide-by-zero denial of serviceEPSS 0.4%CVE-2026-42209MEDIUMFlashMQ: Division by zero crash when using non-default deferred retained message settingEPSS 0.4%CVE-2025-65409HIGHA divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputtinEPSS 0.3%CVE-2023-3044LOWDivide-by-zero in Xpdf 4.04 due to very large page sizeEPSS 0.3%CVE-2025-62594MEDIUMImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)EPSS 0.3%CVE-2026-92881MEDIUMvgmstream AWB parser awb.c init_vgmstream_awb_memory divide by zeroEPSS 0.3%CVE-2020-27790—A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker witEPSS 0.3%CVE-2025-48754LOWIn the memory_pages crate 0.1.0 for Rust, division by zero can occur.EPSS 0.3%CVE-2018-9354MEDIUMIn VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could leaEPSS 0.3%CVE-2023-4678MEDIUMDivide By Zero in gpac/gpacEPSS 0.3%CVE-2026-6683MEDIUMFatFs Divide-by-Zero in exFAT SyncEPSS 0.3%CVE-2021-3941—In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * YEPSS 0.3%CVE-2026-31884MEDIUMFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0EPSS 0.3%CVE-2025-71006MEDIUMA floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via EPSS 0.3%