Falhas do tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-45820MEDIUMfflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory EPSS 0.3%CVE-2025-29918MEDIUMSuricata pcre: negated pcr can cause infinite loopEPSS 0.3%CVE-2024-11097MEDIUMSourceCodester Student Record Management System Main Menu infinite loopEPSS 0.3%CVE-2026-62642MEDIUMIn Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of EPSS 0.3%CVE-2026-118037HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingEPSS 0.3%CVE-2026-109088MEDIUMlibXtst RECORD EnableContext Reply Endless LoopEPSS 0.3%CVE-2026-95386MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.3%CVE-2025-48879MEDIUMOctoPrint Vulnerable to Denial of Service through malformed HTTP requestEPSS 0.3%CVE-2024-11595HIGHLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.3%CVE-2026-42920HIGHBIG-IP DTLS VulnerabilityEPSS 0.3%CVE-2021-29591HIGHStack overflow due to looping TFLite subgraphEPSS 0.3%CVE-2025-2838MEDIUMSilicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service VulnerabilityEPSS 0.3%CVE-2024-35982MEDIUMbatman-adv: Avoid infinite loop trying to resize local TTEPSS 0.3%CVE-2024-53055MEDIUMwifi: iwlwifi: mvm: fix 6 GHz scan constructionEPSS 0.3%CVE-2026-116774MEDIUMrussh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)EPSS 0.3%CVE-2026-25533MEDIUMEnclave has a sandbox escape via infinite recursion and error objectsEPSS 0.3%CVE-2023-46250MEDIUMpypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDFEPSS 0.3%CVE-2023-50120MEDIUMMP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_pEPSS 0.3%CVE-2026-10683LOWDesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)EPSS 0.2%CVE-2025-32029MEDIUMts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value RepresentationEPSS 0.2%