Falhas do tipo CWE-362

1.090 resultados

Condição de corrida

Ocorre quando dois ou mais threads/processos acessam um recurso compartilhado (arquivo, memória, banco de dados) quase simultaneamente, e o resultado final depende da ordem de execução que não é controlada. Se a sincronização falha, um thread pode ler ou modificar dados enquanto outro está no meio da operação, causando inconsistência ou comportamento imprevisto.

Exemplo

Um sistema de autenticação que verifica se um arquivo de token existe (sem estar sincronizado): thread A verifica que o arquivo não existe no instante T1, thread B cria o token no instante T2, mas thread A já passou da verificação e cria um novo token conflitante em T3. O resultado depende do timing, não da lógica.

Como mitigar

Use mecanismos de sincronização (locks, mutexes, operações atômicas) ao acessar recursos compartilhados, ou redesenhe a lógica para evitar compartilhamento (cada thread com seu espaço). Para operações de arquivo, use flags de criação exclusiva (O_EXCL em Unix) em vez de verificar-depois-criar.

CVE-2022-42771MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-1351MEDIUMIBM Storage Virtualize privilege escalationEPSS 0.1%CVE-2024-51515MEDIUMRace condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-48533HIGHIn multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This coulEPSS 0.1%CVE-2022-25822MEDIUMAn use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.EPSS 0.1%CVE-2022-42770MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-39134MEDIUMIn audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2025-54602HIGHAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480EPSS 0.1%CVE-2026-44059LOWNon-reentrant privilege toggleEPSS 0.1%CVE-2024-32891HIGHIn sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of priEPSS 0.1%CVE-2024-58048MEDIUMMulti-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availabEPSS 0.1%CVE-2025-54601HIGHAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480EPSS 0.1%CVE-2024-58045HIGHMulti-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may aEPSS 0.1%CVE-2026-28544MEDIUMRace condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-28549MEDIUMRace condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availabiEPSS 0.1%CVE-2024-31327MEDIUMIn multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-28545MEDIUMRace condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2023-21031MEDIUMIn setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosureEPSS 0.1%CVE-2024-34724HIGHIn _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalationEPSS 0.1%CVE-2026-28551MEDIUMRace condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect avaiEPSS 0.1%