Falhas do tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2025-60753MEDIUMAn issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing craftedEPSS 0.2%CVE-2025-69648MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rngEPSS 0.2%CVE-2023-53026HIGHRDMA/core: Fix ib block iterator counter overflowEPSS 0.2%CVE-2026-71227MEDIUMLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnEPSS 0.2%CVE-2026-7375MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-27024MEDIUMpypdf has a possible infinite loop when processing TreeObjectEPSS 0.2%CVE-2026-23874MEDIUMImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScriptEPSS 0.2%CVE-2026-6531MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-84309MEDIUMpypdf: Possible infinite loop for TreeObject.insert_childEPSS 0.2%CVE-2026-41511MEDIUMOpenMcdf has an Infinite loop DoS via crafted CFB directory cycleEPSS 0.2%CVE-2026-4179MEDIUMstm32: usb: Infinite while loop in Interrupt HandlerEPSS 0.2%CVE-2026-106164HIGHInfinite Loop in Telerik Document Processing XLS ImportEPSS 0.2%CVE-2026-45785MEDIUMOpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycleEPSS 0.2%CVE-2026-68499MEDIUMre2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)EPSS 0.2%CVE-2026-102511HIGHApache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from themEPSS 0.2%CVE-2026-10028MEDIUMGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chainEPSS 0.2%CVE-2026-6534MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-6536MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.2%CVE-2026-120651—CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is setEPSS 0.2%CVE-2025-69647MEDIUMGNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists dEPSS 0.2%