Falhas do tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-67213HIGHnanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandomEPSS 0.3%CVE-2026-15163MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.3%CVE-2026-67214HIGHnanoid Infinite Loop via Negative Size in non-secure moduleEPSS 0.3%CVE-2026-106116MEDIUMImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loopEPSS 0.3%CVE-2022-4104MEDIUMA loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting inEPSS 0.3%CVE-2026-109941HIGHFreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked ResponseEPSS 0.3%CVE-2023-43511HIGHLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareEPSS 0.3%CVE-2026-103410HIGHSession Smart Router: Integer overflow causes denial of service during TLS certificate inspectionEPSS 0.3%CVE-2024-42358MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in pdfioEPSS 0.3%CVE-2026-32739MEDIUMlibheif is Vulnerable to Infinite Loop DoS via stts Sample Duration LookupEPSS 0.3%CVE-2026-107391MEDIUMmusic-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on masterEPSS 0.3%CVE-2026-44302HIGHSnappier: Infinite loop in SnappyStream decompression on malformed framed inputEPSS 0.3%CVE-2024-40675HIGHIn parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of sEPSS 0.3%CVE-2026-121959HIGHFreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket FrameEPSS 0.3%CVE-2026-18726MEDIUMOpen-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsingEPSS 0.3%CVE-2026-110836HIGHFreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-TypeEPSS 0.3%CVE-2026-114095HIGHDulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectEPSS 0.3%CVE-2026-121400HIGHFreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketEPSS 0.3%CVE-2026-27114MEDIUMNanaZip has ROMFS Archive Infinite LoopEPSS 0.3%CVE-2026-24803CRITICALA possible infinite loop vulnerability in coolsnowwolf/ledeEPSS 0.3%