Falhas do tipo CWE-369

222 resultados

Divisão por zero

Ocorre quando o código tenta dividir um número por zero, causando exceção ou comportamento indefinido. É perigoso porque pode derrubar a aplicação, gerar resultados inesperados ou ser explorado para negar serviço.

Exemplo

Um endpoint que calcula média de notas recebe um parâmetro de quantidade de alunos sem validar: se esse valor for zero, a divisão total/quantidade gera erro e a API cai. Um atacante envia requisições malformadas propositalmente para derrubar o serviço.

Como mitigar

Valide todos os denominadores antes de operações aritméticas — verifique se é diferente de zero, trate a condição com lógica apropriada (retorne erro, valor padrão ou zero conforme a regra de negócio). Use análise estática para detectar divisões não protegidas.

CVE-2026-31884MEDIUMFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0EPSS 0.3%CVE-2026-105250MEDIUMvgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zeroEPSS 0.3%CVE-2025-71002MEDIUMA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2025-71006MEDIUMA floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via EPSS 0.3%CVE-2023-4678MEDIUMDivide By Zero in gpac/gpacEPSS 0.3%CVE-2026-6683MEDIUMFatFs Divide-by-Zero in exFAT SyncEPSS 0.3%CVE-2021-3941—In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * YEPSS 0.3%CVE-2026-24826CRITICALOut-of-bounds write in turso3dEPSS 0.3%CVE-2022-3061—Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver EPSS 0.3%CVE-2023-2662LOWDivide-by-zero in Xpdf 4.04 due to bad color space objectEPSS 0.3%CVE-2026-64951LOWVelociraptor DoS triggered by Divide by Zero panicEPSS 0.3%CVE-2026-110605MEDIUMlibschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_lineEPSS 0.3%CVE-2022-41287LOWA vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), TeamcenEPSS 0.3%CVE-2025-71005MEDIUMA floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a cEPSS 0.3%CVE-2022-49294MEDIUMdrm/amd/display: Check if modulo is 0 before dividing.EPSS 0.3%CVE-2024-50233MEDIUMstaging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()EPSS 0.3%CVE-2026-5747HIGHOut-of-bounds Write in Firecracker virtio-pci TransportEPSS 0.3%CVE-2025-9649MEDIUMappneta tcpreplay send_packets.c calc_sleep_time divide by zeroEPSS 0.3%CVE-2024-57922MEDIUMdrm/amd/display: Add check for granularity in dml ceil/floor helpersEPSS 0.3%CVE-2024-50287MEDIUMmedia: v4l2-tpg: prevent the risk of a division by zeroEPSS 0.3%