Fallos del tipo CWE-835

424 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2026-32875HIGHUltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopEPSS 0.5%CVE-2024-45395LOWUnbounded loop over untrusted input can lead to endless data attackEPSS 0.5%CVE-2026-69210HIGHHttp4s: WebSocket decoder accepts negative length, causing infinite decode loopEPSS 0.5%CVE-2022-28886MEDIUMDenial-of-Service (DoS) VulnerabilityEPSS 0.5%CVE-2026-84446HIGHlibheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_framesEPSS 0.5%CVE-2023-4511MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.5%CVE-2025-53628MEDIUMcpp-httplib does not limit the length of a lineEPSS 0.5%CVE-2021-3416—A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issEPSS 0.5%CVE-2019-3819MEDIUMA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite looEPSS 0.5%CVE-2026-93690HIGHuri-js through 4.4.1 Denial of Service via removeDotSegmentsEPSS 0.5%CVE-2026-33699MEDIUMpypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_streamEPSS 0.5%CVE-2026-55865HIGHPython Liquid: Infinite loop when parsing malformed `{% case %}` tagsEPSS 0.5%CVE-2025-20253HIGHCisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service VulnerabilityEPSS 0.4%CVE-2021-3468—A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socEPSS 0.4%CVE-2024-25710HIGHApache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP fileEPSS 0.4%CVE-2026-59874HIGHnode-tar: Negative tar entry size causes infinite loop in archive replaceEPSS 0.4%CVE-2026-20054MEDIUMCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service VulnerabilityEPSS 0.4%CVE-2025-71329HIGHimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF ParserEPSS 0.4%CVE-2025-71330HIGHimage-size 2.0.2 Denial of Service via Malformed ICNS Image ParsingEPSS 0.4%CVE-2026-16551MEDIUMDenial-of-Service in OpenCanary's MongoDB moduleEPSS 0.4%