Falhas do tipo CWE-674

346 resultados

Recursão descontrolada

Acontece quando uma função chama a si mesma (ou é chamada indiretamente por outra) sem limite adequado de profundidade, consumindo toda a memória da pilha (stack overflow). O atacante pode fornecer entrada malformada ou estruturas aninhadas excessivas para disparar recursões infinitas e derrubar a aplicação.

Exemplo

Um parser XML ou JSON que processa estruturas aninhadas recursivamente: se o atacante envia um documento com milhares de níveis de aninhamento, cada chamada recursiva consome espaço da pilha até esgotar e derrubar o processo. Outro caso: função que processa árvores sem verificar profundidade máxima.

Como mitigar

Implemente limite explícito de profundidade (máximo de níveis de recursão) e valide entrada antes de processar. Use iteração (loop) em vez de recursão quando possível, ou monitore o consumo de pilha em tempo de execução com alertas de limite.

CVE-2026-32327CRITICALApache Portable Runtime Utility: apr-util XML stack recursion crashEPSS 0.5%CVE-2026-33498HIGHParse Server: Query condition depth bypass via pre-validation transform pipelineEPSS 0.5%CVE-2026-41636HIGHApache Thrift: Node.js skip() recursionEPSS 0.5%CVE-2026-63759HIGHSurrealDB before 3.1.0 Denial of Service nested type annotationsEPSS 0.4%CVE-2025-59364MEDIUMThe express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/EPSS 0.4%CVE-2026-93435HIGHredis-parser through 3.0.0 Denial of Service via Unbounded RecursionEPSS 0.4%CVE-2026-45664MEDIUMImageMagick: Policy Bypass in MNG coder couldEPSS 0.4%CVE-2026-53752HIGHdocx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of ServiceEPSS 0.4%CVE-2024-58103MEDIUMSquare Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.EPSS 0.4%CVE-2026-48502HIGHMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflowsEPSS 0.4%CVE-2026-15996MEDIUMDenial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parametersEPSS 0.4%CVE-2026-7164HIGHpf can overflow the stack parsing crafted SCTP packetsEPSS 0.4%CVE-2026-18140HIGHUncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated serversEPSS 0.4%CVE-2025-66031HIGHnode-forge ASN.1 Unbounded RecursionEPSS 0.4%CVE-2026-17501MEDIUMggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionEPSS 0.4%CVE-2026-26209HIGHcbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loadsEPSS 0.4%CVE-2026-64194HIGHNet::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chainsEPSS 0.4%CVE-2025-53605MEDIUMThe protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parEPSS 0.4%CVE-2026-93687HIGHbraces through 3.0.3 Stack Overflow via Deeply Nested PatternsEPSS 0.4%CVE-2026-49847HIGHFreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSONEPSS 0.4%