Falhas do tipo CWE-835

534 resultados

Loop infinito com condição de saída inalcançável

O programa entra em um loop cuja condição de parada nunca é satisfeita, fazendo-o executar indefinidamente. Isso consome recursos (CPU, memória) sem progresso, causando travamento, negação de serviço ou comportamento impredizível da aplicação.

Exemplo

Um validador de entrada que loop enquanto o valor não é válido, mas nunca atualiza a variável de controle; ou uma fila de processamento que tenta desempilhar itens, mas a condição de parada verifica uma variável que nunca muda. O servidor fica preso processando eternamente.

Como mitigar

Revisão de lógica: garantir que toda variável usada na condição de saída seja modificada dentro do loop. Implementar timeouts e limites de iteração como salvaguarda. Testes com entrada válida, inválida e edge cases para detectar loops travados antes do deploy.

CVE-2026-102726HIGHUnbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadEPSS 0.2%CVE-2026-102714HIGHICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanent loopEPSS 0.2%CVE-2026-49495MEDIUMGhidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie ParserEPSS 0.2%CVE-2024-6790MEDIUMMali GPU Kernel Driver can cause the whole system to become unresponsiveEPSS 0.2%CVE-2026-92454MEDIUMJPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decodeEPSS 0.2%CVE-2026-45271MEDIUMpicotls has infinite recursion in the minicrypto ASN.1 decoderEPSS 0.2%CVE-2026-7771MEDIUMIBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceEPSS 0.1%CVE-2026-0960MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-6521MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-6528MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-48986MEDIUMpam_usb: Infinite loop DoS in process-tree walk when parent process exits during authenticationEPSS 0.1%CVE-2026-96418MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-5407MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-107677MEDIUMFFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate MediaEPSS 0.1%CVE-2025-27560MEDIUMLoop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service. SysteEPSS 0.1%CVE-2026-88252MEDIUMSssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustionEPSS 0.1%CVE-2026-34962MEDIUMbarebox ext4 Directory Parsing Infinite Loop Denial of ServiceEPSS 0.1%CVE-2023-37366LOWAn issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 98EPSS 0.1%CVE-2026-6523MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkEPSS 0.1%CVE-2026-120251MEDIUMimagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()EPSS 0.1%