Falhas do tipo CWE-369
222 resultadosDivisão por zero
Ocorre quando o código tenta dividir um número por zero, causando exceção ou comportamento indefinido. É perigoso porque pode derrubar a aplicação, gerar resultados inesperados ou ser explorado para negar serviço.
Exemplo
Um endpoint que calcula média de notas recebe um parâmetro de quantidade de alunos sem validar: se esse valor for zero, a divisão total/quantidade gera erro e a API cai. Um atacante envia requisições malformadas propositalmente para derrubar o serviço.
Como mitigar
Valide todos os denominadores antes de operações aritméticas — verifique se é diferente de zero, trate a condição com lógica apropriada (retorne erro, valor padrão ou zero conforme a regra de negócio). Use análise estática para detectar divisões não protegidas.
CVE-2025-54873LOWRISC Zero Underconstrained Vulnerability: DivisionEPSS 0.4%CVE-2026-25799MEDIUMImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crashEPSS 0.4%CVE-2026-47153HIGHLevel Control Step With On/Off divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47152HIGHLevel Control Move divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2025-35435MEDIUMCISA Thorium download stream divide by zeroEPSS 0.4%CVE-2026-42209MEDIUMFlashMQ: Division by zero crash when using non-default deferred retained message settingEPSS 0.4%CVE-2023-3896HIGHA divide by zero issue existed in vim of OpenCloudOS StreamEPSS 0.4%CVE-2026-37232HIGHAn issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The fuEPSS 0.4%CVE-2026-33593HIGHDenial of service via crafted DNSCrypt queryEPSS 0.4%CVE-2026-79513MEDIUMA divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackeEPSS 0.4%CVE-2025-62594MEDIUMImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)EPSS 0.4%CVE-2026-62431HIGHViridian STIMER division by zeroEPSS 0.4%CVE-2025-65409HIGHA divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputtinEPSS 0.4%CVE-2026-75466MEDIUMlibjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image wiEPSS 0.4%CVE-2026-38345MEDIUMA Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attaEPSS 0.4%CVE-2023-3044LOWDivide-by-zero in Xpdf 4.04 due to very large page sizeEPSS 0.3%CVE-2025-48754LOWIn the memory_pages crate 0.1.0 for Rust, division by zero can occur.EPSS 0.3%CVE-2026-93589MEDIUMImageMagick before 7.1.2-31 Division by Zero in FLIF encoderEPSS 0.3%CVE-2020-27790—A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker witEPSS 0.3%CVE-2018-9354MEDIUMIn VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could leaEPSS 0.3%