Falhas do tipo CWE-835

424 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-21507HIGHiccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()EPSS 0.4%CVE-2024-22654HIGHtcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.EPSS 0.4%CVE-2023-52726MEDIUMOpen Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe funEPSS 0.4%CVE-2026-72712MEDIUMNmap 7.99 Denial of Service via Zero-Length TCP Option PacketEPSS 0.4%CVE-2026-2219HIGHIt was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data sEPSS 0.4%CVE-2026-29975HIGHlwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detectionEPSS 0.4%CVE-2026-54417HIGHInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoSEPSS 0.4%CVE-2026-21905HIGHJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashEPSS 0.4%CVE-2026-78129MEDIUMstrongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.EPSS 0.4%CVE-2025-10903MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.4%CVE-2026-24688MEDIUMpypdf has possible Infinite Loop when processing outlines/bookmarksEPSS 0.4%CVE-2022-33239HIGHTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, SnapdragEPSS 0.4%CVE-2022-25742HIGHDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOEPSS 0.4%CVE-2026-77117MEDIUMSHIFT_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2026-80489MEDIUMEUC_JISX0213 decoding may hang on crafted inputEPSS 0.4%CVE-2026-85715HIGHExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory ExhaustionEPSS 0.4%CVE-2021-20255—A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while pEPSS 0.4%CVE-2026-32889MEDIUMtinytag: Denial of Service via non-terminating SYLT frame parsing loopEPSS 0.4%CVE-2025-21850CRITICALnvmet: Fix crash when a namespace is disabledEPSS 0.4%CVE-2022-33238HIGHTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon CoEPSS 0.4%