Falhas do tipo CWE-369
208 resultadosDivisão por zero
Ocorre quando o código tenta dividir um número por zero, causando exceção ou comportamento indefinido. É perigoso porque pode derrubar a aplicação, gerar resultados inesperados ou ser explorado para negar serviço.
Exemplo
Um endpoint que calcula média de notas recebe um parâmetro de quantidade de alunos sem validar: se esse valor for zero, a divisão total/quantidade gera erro e a API cai. Um atacante envia requisições malformadas propositalmente para derrubar o serviço.
Como mitigar
Valide todos os denominadores antes de operações aritméticas — verifique se é diferente de zero, trate a condição com lógica apropriada (retorne erro, valor padrão ou zero conforme a regra de negócio). Use análise estática para detectar divisões não protegidas.
CVE-2023-38674MEDIUMFPE in paddle.nanmedianEPSS 0.5%CVE-2023-52306MEDIUMFPE in paddle.lerpEPSS 0.5%CVE-2023-52308MEDIUMFPE in paddle.aminEPSS 0.5%CVE-2025-23321HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an EPSS 0.5%CVE-2021-33844—A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wavEPSS 0.5%CVE-2022-35996MEDIUMFloating point exception in `Conv2D` in TensorFlowEPSS 0.5%CVE-2026-35215HIGHFirebird: DoS via malicious slice descriptor in slice packetEPSS 0.5%CVE-2025-4637HIGHDivide By Zero in dlibEPSS 0.5%CVE-2024-4785HIGHBT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by ZeroEPSS 0.5%CVE-2023-1127HIGHDivide By Zero in vim/vimEPSS 0.5%CVE-2026-25169MEDIUMWindows Graphics Component Denial of Service VulnerabilityEPSS 0.5%CVE-2024-57598MEDIUMA floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp wEPSS 0.5%CVE-2026-91955HIGHFreeRDP before 3.31.0 Denial of Service via Desktop DimensionsEPSS 0.5%CVE-2021-23210—A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted EPSS 0.4%CVE-2026-47153HIGHLevel Control Step With On/Off divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47152HIGHLevel Control Move divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2026-20057MEDIUMCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service VulnerabilityEPSS 0.4%CVE-2025-35435MEDIUMCISA Thorium download stream divide by zeroEPSS 0.4%CVE-2023-3896HIGHA divide by zero issue existed in vim of OpenCloudOS StreamEPSS 0.4%CVE-2026-53503HIGHThumbor convolution filter allows divide-by-zero in C extension leading to remote DoSEPSS 0.4%