Fallos del tipo CWE-703

181 resultados

Tratamento inadequado de condições excepcionais

É quando o código não verifica ou não lida corretamente com situações de erro, exceção ou estado anômalo. O programa segue adiante como se nada tivesse acontecido, ignorando sinais de falha que deveriam interromper ou redirecionar a execução. Isso pode levar a comportamento imprevisto, vazamento de dados ou falha de segurança.

Ejemplo

Um servidor que recebe uma requisição HTTP não valida; se o parser não verifica o status da leitura e passa dados corrompidos para a próxima camada, a aplicação pode processar lixo como dado legítimo, causando injeção ou bypass de validação.

Cómo mitigar

Sempre verifique o resultado de operações críticas (leitura, alocação, conversão) e implemente blocos catch/finally específicos. Use assertions e logging para detectar estados anômalos cedo, e falhe seguramente (fail-safe) quando algo estiver fora do esperado.

CVE-2026-82417MEDIUMqs.stringify throws TypeError on objects with a non-callable constructor.isBuffer propertyEPSS 0.4%CVE-2025-61602HIGHBigBlueButton vulnerable to Chat DoS via invalid reactionEmojiIdEPSS 0.4%CVE-2023-0204MEDIUMNVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper hEPSS 0.4%CVE-2026-80135HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check orEPSS 0.4%CVE-2025-13021CRITICALIncorrect boundary conditions in the Graphics: WebGPU componentEPSS 0.4%CVE-2025-13022CRITICALIncorrect boundary conditions in the Graphics: WebGPU componentEPSS 0.4%CVE-2025-13023CRITICALSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentEPSS 0.4%CVE-2025-13026CRITICALSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentEPSS 0.4%CVE-2024-38482MEDIUMCloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A higEPSS 0.4%CVE-2023-39136—An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafteEPSS 0.4%CVE-2021-25525LOWImproper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFCEPSS 0.3%CVE-2026-16218LOWhunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditionsEPSS 0.3%CVE-2024-9104MEDIUMUltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value CheckEPSS 0.3%CVE-2025-68135MEDIUMEVerest's inadequate exception handling leads to denial of serviceEPSS 0.3%CVE-2022-22224MEDIUMJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVEPSS 0.3%CVE-2026-1996MEDIUMCertain HP OfficeJet Pro Printers – Denial of ServiceEPSS 0.3%CVE-2024-25741MEDIUMprinter_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might EPSS 0.3%CVE-2025-65017HIGHDecidim's private data exports can lead to data leaksEPSS 0.3%CVE-2021-25516MEDIUMAn improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locatioEPSS 0.3%CVE-2024-20089HIGHIn wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additionEPSS 0.3%