Falhas do tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-107348MEDIUMInteger overflow causes an infinite loop in message buffer growth in PgBouncerEPSS 0.4%CVE-2026-91952HIGHFreeRDP before 3.31.0 Denial of Service via pool_decode_rectEPSS 0.4%CVE-2020-14394—An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) EPSS 0.4%CVE-2025-66252HIGHInfinite Loop Denial of Service via Failed File DeletionEPSS 0.4%CVE-2025-27497HIGHOpenDJ Denial of Service (Dos) using alias loopEPSS 0.4%CVE-2026-44740MEDIUMgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionEPSS 0.4%CVE-2026-62949MEDIUMAsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONEPSS 0.4%CVE-2023-50763MEDIUMA vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX0EPSS 0.4%CVE-2025-0290MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.4%CVE-2026-64374HIGHsched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RTEPSS 0.4%CVE-2020-25641—A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the blocEPSS 0.4%CVE-2026-41150MEDIUMMermaid Gantt Charts are vulnerable to an Infinite Loop DoSEPSS 0.4%CVE-2026-106568MEDIUMImageMagick: Infinite Loop when reading a crafted XMP profileEPSS 0.4%CVE-2025-29776HIGHAzle calling `setTimer` causes infinite loop of timersEPSS 0.4%CVE-2026-107621HIGHJ4Care dcm4che Loop with Unreachable Exit ConditionEPSS 0.4%CVE-2026-105273HIGHJ4Care dcm4che Loop with Unreachable Exit ConditionEPSS 0.4%CVE-2026-120596HIGHCVE-2026-120596EPSS 0.4%CVE-2026-118036HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringEPSS 0.4%CVE-2026-102185HIGHJunos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is usedEPSS 0.4%CVE-2026-26066MEDIUMImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profileEPSS 0.4%