Falhas do tipo CWE-835

424 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-11932MEDIUMSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.3%CVE-2022-4104MEDIUMA loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting inEPSS 0.3%CVE-2026-49017HIGHIn OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request boEPSS 0.3%CVE-2024-42358MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in pdfioEPSS 0.3%CVE-2026-32739MEDIUMlibheif is Vulnerable to Infinite Loop DoS via stts Sample Duration LookupEPSS 0.3%CVE-2026-67213HIGHnanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandomEPSS 0.3%CVE-2026-0619MEDIUMInteger Wraparound DoS in Silicon Labs Matter ImplementationEPSS 0.3%CVE-2024-40675HIGHIn parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of sEPSS 0.3%CVE-2025-63829MEDIUMeProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.EPSS 0.3%CVE-2026-78132HIGHstrongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.EPSS 0.3%CVE-2025-41074MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2025-41075MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2025-71397HIGHSurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopsEPSS 0.3%CVE-2026-6684MEDIUMFatFs Infinite Loop in GPT Partition ScanEPSS 0.3%CVE-2026-55588MEDIUMORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource ConsumptionEPSS 0.3%CVE-2020-13602MEDIUMRemote Denial of Service in LwM2M do_write_op_tlvEPSS 0.3%CVE-2026-41146HIGHfacil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit conditionEPSS 0.3%CVE-2024-2397MEDIUMinfinite loop in the PPP printer of tcpdumpEPSS 0.3%CVE-2025-30187LOWDenial of service via crafted DoH exchange in PowerDNS DNSdistEPSS 0.3%CVE-2026-68762MEDIUMIn JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleEPSS 0.3%