Fallos del tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2026-17004HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.5%CVE-2026-16931HIGHIBM i is Affected By A Denial of Service Vulnerability []EPSS 0.5%CVE-2022-29028—A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentEPSS 0.5%CVE-2024-0211HIGHLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.5%CVE-2026-55588MEDIUMORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource ConsumptionEPSS 0.5%CVE-2025-30145HIGHGeoServer has an Infinite Loop Vulnerability in Jiffle processEPSS 0.5%CVE-2026-68096HIGHaudit: fix recursive locking deadlock in audit_dupe_exe()EPSS 0.5%CVE-2026-106121MEDIUMRabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSEPSS 0.5%CVE-2026-2739MEDIUMThis affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString()EPSS 0.5%CVE-2026-20019MEDIUMMultiple Cisco Products Snort 3 Netflow Denial of Service VulnerabilitiesEPSS 0.5%CVE-2026-76445MEDIUMMultiple Cisco Products Snort 3 Denial of Service VulnerabilityEPSS 0.5%CVE-2025-10903MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.5%CVE-2026-61556HIGHLiquidJS: An infinite loop vulnerability in `strip_html` filterEPSS 0.5%CVE-2025-53628MEDIUMcpp-httplib does not limit the length of a lineEPSS 0.5%CVE-2026-85730HIGHsmol-toml: Denial of Service via malformed TOML documentsEPSS 0.5%CVE-2026-115774MEDIUMTwisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHEPSS 0.5%CVE-2024-36732HIGHAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.teEPSS 0.5%CVE-2025-20253HIGHCisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service VulnerabilityEPSS 0.5%CVE-2024-43366HIGHzkvyper ignored loop range boundsEPSS 0.5%CVE-2026-111496CRITICALApache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationEPSS 0.5%