Falhas do tipo CWE-617

460 resultados

Asserção acessível ao atacante

É quando o código contém uma asserção (assertion) que pode ser disparada por um atacante, causando travamento ou parada da aplicação. Diferente de asserções usadas apenas em desenvolvimento, essas chegam à produção e podem ser exploradas para negar serviço.

Exemplo

Um servidor web valida entrada do usuário com assert(tamanho_entrada < 1000). Um atacante envia payload grande, a asserção falha e o processo morre, deixando o serviço indisponível para outros usuários.

Como mitigar

Remova ou desative asserções em código de produção; use exceções tratáveis em vez de assertions para validações que dependem de entrada do usuário. Compile com flags que desabilitam assertions (-da em Java) antes de deployar.

CVE-2025-41067HIGHReachable Assertion vulnerability in Open5GSEPSS 0.4%CVE-2026-92416MEDIUMOpen5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertionEPSS 0.4%CVE-2026-29116HIGHA vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triEPSS 0.4%CVE-2026-84450MEDIUMlibheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)EPSS 0.4%CVE-2026-78186MEDIUMOpen5GS HSS hss-cx-path.c assertionEPSS 0.4%CVE-2025-24798MEDIUMMeshtastic crashes via an unimplemented routing module replyEPSS 0.4%CVE-2025-68468MEDIUMAvahi has a reachable assertion in lookup_multicast_callbackEPSS 0.4%CVE-2026-50721HIGHIKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadEPSS 0.4%CVE-2026-52718MEDIUMGstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusionEPSS 0.4%CVE-2024-50615MEDIUMTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharactEPSS 0.4%CVE-2022-35205MEDIUMAn issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause aEPSS 0.4%CVE-2022-40508HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-40538HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-40504HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-33251HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-22060HIGHReachable Assertion in ModemEPSS 0.4%CVE-2022-34144HIGHReachable assertion in ModemEPSS 0.4%CVE-2023-21653HIGHReachable Assertion in ModemEPSS 0.4%CVE-2023-21646HIGHReachable Assertion in ModemEPSS 0.4%CVE-2026-4046HIGHiconv crash due to assertion failure with untrusted inputEPSS 0.4%