Falhas do tipo CWE-617
460 resultadosAsserção acessível ao atacante
É quando o código contém uma asserção (assertion) que pode ser disparada por um atacante, causando travamento ou parada da aplicação. Diferente de asserções usadas apenas em desenvolvimento, essas chegam à produção e podem ser exploradas para negar serviço.
Exemplo
Um servidor web valida entrada do usuário com assert(tamanho_entrada < 1000). Um atacante envia payload grande, a asserção falha e o processo morre, deixando o serviço indisponível para outros usuários.
Como mitigar
Remova ou desative asserções em código de produção; use exceções tratáveis em vez de assertions para validações que dependem de entrada do usuário. Compile com flags que desabilitam assertions (-da em Java) antes de deployar.
CVE-2023-1428HIGHDenial-of-Service in gRPCEPSS 0.4%CVE-2025-68471MEDIUMAvahi has a reachable assertion in lookup_startEPSS 0.4%CVE-2026-9737HIGHFind command with $meta sort can lead to crashEPSS 0.4%CVE-2022-25689HIGHDenial of service in Modem due to reachable assertion in Snapdragon MobileEPSS 0.4%CVE-2022-25692HIGHDenial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, SEPSS 0.4%CVE-2022-25702HIGHDenial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.4%CVE-2022-25691HIGHDenial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon MobileEPSS 0.4%CVE-2026-27809MEDIUMpsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gapsEPSS 0.4%CVE-2022-33244HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-40527HIGHReachable Assertion in WLAN Embedded SWEPSS 0.4%CVE-2022-33250HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-33272HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-33254HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-25672HIGHDenial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon MobileEPSS 0.4%CVE-2022-25673HIGHDenial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon MobileEPSS 0.4%CVE-2026-86317MEDIUMggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertionEPSS 0.4%CVE-2026-44319HIGHfree5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)EPSS 0.4%CVE-2026-4392MEDIUMTeamSpeak 3 Server clientek Handshake assertionEPSS 0.4%CVE-2026-66754HIGHRouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encodingEPSS 0.4%CVE-2024-24427HIGHA reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted EPSS 0.4%