Fallos del tipo CWE-835

424 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2026-21507HIGHiccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()EPSS 0.4%CVE-2024-22654HIGHtcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.EPSS 0.4%CVE-2023-52726MEDIUMOpen Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe funEPSS 0.4%CVE-2026-72712MEDIUMNmap 7.99 Denial of Service via Zero-Length TCP Option PacketEPSS 0.4%CVE-2026-2219HIGHIt was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data sEPSS 0.4%CVE-2026-29975HIGHlwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detectionEPSS 0.4%CVE-2026-54417HIGHInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoSEPSS 0.4%CVE-2026-21905HIGHJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashEPSS 0.4%CVE-2026-78129MEDIUMstrongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.EPSS 0.4%CVE-2025-10903MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.4%CVE-2026-24688MEDIUMpypdf has possible Infinite Loop when processing outlines/bookmarksEPSS 0.4%CVE-2022-33239HIGHTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, SnapdragEPSS 0.4%CVE-2022-25742HIGHDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOEPSS 0.4%CVE-2026-77117MEDIUMSHIFT_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2026-80489MEDIUMEUC_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2026-85715HIGHExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory ExhaustionEPSS 0.4%CVE-2021-20255—A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while pEPSS 0.4%CVE-2026-32889MEDIUMtinytag: Denial of Service via non-terminating SYLT frame parsing loopEPSS 0.4%CVE-2025-21850CRITICALnvmet: Fix crash when a namespace is disabledEPSS 0.4%CVE-2022-33238HIGHTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon CoEPSS 0.4%