Fallos del tipo CWE-674

348 resultados

Recursão não controlada

Ocorre quando uma função chama a si mesma ou a outras funções de forma cíclica sem um limite adequado de profundidade, esgotando a pilha de execução (stack overflow). O risco é causar negação de serviço ou crash da aplicação, frequentemente disparado por entrada maliciosa ou dados estruturados recursivamente.

Ejemplo

Um parser XML ou JSON que não valida a profundidade de aninhamento pode sofrer recursão infinita ao processar um documento atacante com centenas de níveis aninhados, consumindo toda a memória de pilha e derrubando o serviço.

Cómo mitigar

Implemente limites de profundidade em algoritmos recursivos (máximo de chamadas aninhadas), use iteração com pilha explícita quando possível, e valide a entrada antes de processar estruturas potencialmente recursivas. Teste com payloads de aninhamento profundo.

CVE-2025-50420MEDIUMAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted EPSS 0.3%CVE-2026-74795HIGHScriban before 6.6.0 Denial of Service via Uncontrolled RecursionEPSS 0.3%CVE-2026-46689HIGHKanidm: Unauthenticated process abort via SCIM filter stack exhaustionEPSS 0.3%CVE-2024-57257LOWA stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.EPSS 0.3%CVE-2026-17177HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2024-49363HIGHUncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in MisskeyEPSS 0.3%CVE-2026-13506HIGHLazy ASN.1 sequence forcing resets nesting-depth guardEPSS 0.3%CVE-2026-59645HIGHOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaEPSS 0.3%CVE-2026-53531MEDIUMratex-parser has unbounded parser recursion that leads to stack overflow (process abort)EPSS 0.3%CVE-2022-47662MEDIUMGPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:66EPSS 0.3%CVE-2026-74792HIGHScriban before 7.0.0 Stack Overflow via nested array initializersEPSS 0.3%CVE-2025-33096MEDIUMIBM Engineering Requirements Management Doors Next denial of serviceEPSS 0.3%CVE-2026-67194HIGHCourier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH QueriesEPSS 0.3%CVE-2023-2664LOWStack overflow in Xpdf 4.04 due to object loop in PDF embedded file treeEPSS 0.3%CVE-2024-2965MEDIUMDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchainEPSS 0.3%CVE-2026-55588MEDIUMORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource ConsumptionEPSS 0.3%CVE-2025-1492HIGHUncontrolled Recursion in WiresharkEPSS 0.3%CVE-2026-72636MEDIUMUncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of ServiceEPSS 0.3%CVE-2026-54451HIGHElixir protobuf: Unbounded recursion depth in embedded-message decodingEPSS 0.3%CVE-2025-65519MEDIUMmayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fEPSS 0.3%