Fallos del tipo CWE-617

557 resultados

Asserção acessível por entrada não confiável

Código de produção contém asserções (assert statements) que podem ser disparadas por dados fornecidos pelo usuário ou atacante, causando falha abrupta da aplicação. Diferente de validação, asserções são mecanismos de debug que não deveriam controlar o fluxo normal — quando acionadas, encerram o programa, provocando negação de serviço.

Ejemplo

Um servidor web recebe um parâmetro `user_id` e executa `assert user_id > 0` antes de consultar o banco. Um atacante envia `user_id=0` ou negativo, a asserção falha e derruba o servidor. O código assume que validação já ocorreu, mas ela não existe.

Cómo mitigar

Substitua asserções por validação explícita com tratamento de erro apropriado (throw exception, retornar código de erro). Remova ou desative asserções em builds de produção. Use asserções apenas para condições internas que nunca deveriam ocorrer, nunca para entrada de usuário.

CVE-2026-102483HIGHReachable Assertion in ntpsecEPSS 0.4%CVE-2025-65559HIGHAn issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with aEPSS 0.4%CVE-2026-105753MEDIUMvLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine coreEPSS 0.4%CVE-2026-9718MEDIUMCWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impactEPSS 0.4%CVE-2025-32095HIGHPexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a craftEPSS 0.4%CVE-2026-121951HIGHFreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input EventEPSS 0.4%CVE-2026-10822MEDIUMKey Record using PRIVATEDNS algorithm may lead to unexpected exitEPSS 0.4%CVE-2025-22919MEDIUMA reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a craEPSS 0.4%CVE-2026-9737HIGHFind command with $meta sort can lead to crashEPSS 0.4%CVE-2026-63140MEDIUMReachable Assertion in Elasticsearch Leading to Denial of ServiceEPSS 0.4%CVE-2026-67303MEDIUMFreeRDP before 3.29.0 Denial of Service via serial DeviceControlEPSS 0.4%CVE-2026-82425HIGHApache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of ServiceEPSS 0.4%CVE-2024-24427HIGHA reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted EPSS 0.4%CVE-2017-12168—The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause EPSS 0.4%CVE-2026-43667MEDIUMA reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadEPSS 0.4%CVE-2026-37227HIGHFlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP message types in the near-EPSS 0.4%CVE-2026-37225HIGHFlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinition field. The E42 layer dEPSS 0.4%CVE-2026-62377MEDIUMlibheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)EPSS 0.4%CVE-2024-50615MEDIUMTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharactEPSS 0.4%CVE-2023-1428HIGHDenial-of-Service in gRPCEPSS 0.4%