Falhas do tipo CWE-783

20 resultados

Erro de precedência de operadores

Ocorre quando o desenvolvedor usa a precedência incorreta de operadores lógicos ou aritméticos em uma expressão, resultando em uma avaliação diferente da intenção. Por exemplo, uma expressão com && e || pode executar em ordem diferente da esperada, causando lógica de validação ou controle de fluxo incorreta.

Exemplo

Um código de autenticação que deveria validar 'usuário admin OU (usuário normal E senha correta)' é escrito como 'usuário admin OR usuário normal AND senha correta', que devido à precedência do AND se torna '(usuário admin) OR (usuário normal AND senha)'. Um atacante pode contornar a verificação de senha se for admin, mesmo com credenciais inválidas.

Como mitigar

Use parênteses explícitos em todas as expressões lógicas complexas para deixar a precedência clara e intencional. Implemente testes unitários que cubram casos limítrofes de lógica condicional e considere usar ferramentas de análise estática para detectar expressões ambíguas no código.

CVE-2024-32896HIGHthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional exeEPSS 3.0%KEVCVE-2024-20314HIGHA vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticEPSS 0.8%CVE-2024-20480HIGHA vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow aEPSS 0.6%CVE-2024-27886HIGHA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app maEPSS 0.5%CVE-2026-0209MEDIUMUnder certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.EPSS 0.4%CVE-2026-25233HIGHPEAR Has a Roadmap Authorization Bypass via Operator Precedence BugEPSS 0.3%CVE-2025-24210MEDIUMA logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4EPSS 0.3%CVE-2026-7270HIGHLocal privilege escalation via execve()EPSS 0.2%CVE-2025-27512LOWZincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methodsEPSS 0.2%CVE-2017-13322CRITICALIn endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error EPSS 0.2%CVE-2024-34741HIGHIn setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaEPSS 0.2%CVE-2022-20477HIGHIn shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic EPSS 0.1%CVE-2024-31326HIGHIn multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This EPSS 0.1%CVE-2024-31335HIGHIn DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lEPSS 0.1%CVE-2024-31331HIGHIn setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. TEPSS 0.1%CVE-2024-34723MEDIUMIn onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logiEPSS 0.1%CVE-2024-34726HIGHIn PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local esEPSS 0.1%CVE-2024-34720HIGHIn com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible EPSS 0.1%CVE-2024-44093HIGHIn ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2024-49736MEDIUMIn onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the codEPSS 0.1%