Fallos del tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2025-60753MEDIUMAn issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing craftedEPSS 0.2%CVE-2025-69648MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rngEPSS 0.2%CVE-2023-53026HIGHRDMA/core: Fix ib block iterator counter overflowEPSS 0.2%CVE-2026-71227MEDIUMLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnEPSS 0.2%CVE-2026-7375MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-27024MEDIUMpypdf has a possible infinite loop when processing TreeObjectEPSS 0.2%CVE-2026-23874MEDIUMImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScriptEPSS 0.2%CVE-2026-6531MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-84309MEDIUMpypdf: Possible infinite loop for TreeObject.insert_childEPSS 0.2%CVE-2026-41511MEDIUMOpenMcdf has an Infinite loop DoS via crafted CFB directory cycleEPSS 0.2%CVE-2026-4179MEDIUMstm32: usb: Infinite while loop in Interrupt HandlerEPSS 0.2%CVE-2026-106164HIGHInfinite Loop in Telerik Document Processing XLS ImportEPSS 0.2%CVE-2026-45785MEDIUMOpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycleEPSS 0.2%CVE-2026-68499MEDIUMre2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)EPSS 0.2%CVE-2026-102511HIGHApache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from themEPSS 0.2%CVE-2026-10028MEDIUMGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chainEPSS 0.2%CVE-2026-6534MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-6536MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-120651—CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is setEPSS 0.2%CVE-2025-69647MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists dEPSS 0.2%