Fallos del tipo CWE-835

425 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2026-6519MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-6520MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-56289MEDIUMLoop with Unreachable Exit Condition in GNU patchEPSS 0.2%CVE-2026-15923MEDIUMInfinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_sizeEPSS 0.2%CVE-2026-12629MEDIUMPL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of serviceEPSS 0.2%CVE-2026-71227MEDIUMLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnEPSS 0.2%CVE-2025-60753MEDIUMAn issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing craftedEPSS 0.2%CVE-2026-87082HIGHNet::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycodeEPSS 0.2%CVE-2026-46378MEDIUMDasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literalEPSS 0.2%CVE-2026-54651MEDIUMpypdf: Possible infinite loop when processing threads/articles in writerEPSS 0.2%CVE-2026-34852MEDIUMStack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2022-20476MEDIUMIn setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustiEPSS 0.2%CVE-2025-69647MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists dEPSS 0.2%CVE-2026-49495MEDIUMGhidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie ParserEPSS 0.2%CVE-2024-6790MEDIUMMali GPU Kernel Driver can cause the whole system to become unresponsiveEPSS 0.2%CVE-2026-7771MEDIUMIBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceEPSS 0.1%CVE-2025-13946MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-0960MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-6521MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-48986MEDIUMpam_usb: Infinite loop DoS in process-tree walk when parent process exits during authenticationEPSS 0.1%