目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CWE-369 除零错误 类漏洞列表 170

CWE-369 除零错误 类弱点 170 条 CVE 漏洞汇总,含 AI 中文分析。

CWE-369 属于逻辑错误类漏洞,指程序执行除以零的操作。当输入异常值或未检测到的错误导致除数为零时,攻击者可利用此缺陷引发程序崩溃、拒绝服务或获取敏感内存信息。开发者应在除法运算前严格校验除数非零,对物理尺寸等关键参数实施边界检查与异常处理,从而确保计算逻辑的健壮性。

MITRE CWE 官方描述
CWE:CWE-369 除以零(Divide By Zero) 英文:产品将某个值除以零。 这种弱点通常发生在向产品提供了意外值,或者发生了未被正确检测到的错误时。它经常出现在涉及物理尺寸(如大小、长度、宽度和高度)的计算中。
常见影响 (1)
Availability DoS: Crash, Exit, or Restart
A Divide by Zero results in a crash.
代码示例 (2)
The following Java example contains a function to compute an average but does not validate that the input value used as the denominator is not zero. This will create an exception for attempting to divide by zero. If this error is not handled by Java exception handling, unexpected results can occur.
public int computeAverageResponseTime (int totalTime, int numRequests) { return totalTime / numRequests; }
Bad · Java
public int computeAverageResponseTime (int totalTime, int numRequests) throws ArithmeticException { if (numRequests == 0) { System.out.println("Division by zero attempted!"); throw ArithmeticException; } return totalTime / numRequests; }
Good · Java
The following C/C++ example contains a function that divides two numeric values without verifying that the input value used as the denominator is not zero. This will create an error for attempting to divide by zero, if this error is not caught by the error handling capabilities of the language, unexpected results can occur.
double divide(double x, double y){ return x/y; }
Bad · C
const int DivideByZero = 10; double divide(double x, double y){ if ( 0 == y ){ throw DivideByZero; } return x/y; } ... try{ divide(10, 0); } catch( int i ){ if(i==DivideByZero) { cerr<<"Divide by zero error"; } }
Good · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-125258 FFmpeg 9.0.2 远程拒绝服务漏洞 — FFmpeg 4.7 Medium 2026-11-09
CVE-2026-125254 FFmpeg 9.0.2 VVC 模块整数除法溢出漏洞 — FFmpeg 5.5 Medium 2026-11-09
CVE-2026-125232 FFmpeg 9.0.2 B 帧运动估计除零漏洞 — FFmpeg 5.5 Medium 2026-11-09
CVE-2026-125185 FFmpeg 9.0.2 远程拒绝服务漏洞 — FFmpeg 5.5 Medium 2026-11-09
CVE-2026-107359 WF200 Wi-Fi 信标解析崩溃漏洞 — WF200 FW 7.1 High 2026-11-05
CVE-2026-122330 Blosc c-blosc2 3.5.0 前除零漏洞 — c-blosc2 5.5 Medium 2026-11-05
CVE-2026-121410 FreeRDP 3.32.2 前版本 RDPGFX 拒绝服务漏洞 — FreeRDP 4.3 Medium 2026-11-03
CVE-2026-65160 NVIDIA nvJPEG 除零漏洞导致拒绝服务 — CUDA Toolkit 5.5 Medium 2026-11-03
CVE-2026-59959 SAIL WebP 解码器除零漏洞 — sail 4.8 Medium 2026-10-28
CVE-2026-112054 Schroedinger 1.0.11 低延迟变换解析除零漏洞 — schroedinger 5.5 Medium 2026-10-18
CVE-2026-112013 libtta 2.3 tta_decoder_init_get_info 除零漏洞 — libtta 5.5 Medium 2026-10-18
CVE-2026-110605 libschrift 0.10.2 除零漏洞 — libschrift 5.5 Medium 2026-10-14
CVE-2026-107159 MiniUPnPd 2.3.11 远程拒绝服务漏洞 — miniupnpd 6.5 Medium 2026-10-07
CVE-2026-105250 vgmstream IMA解码器除零漏洞 — vgmstream 4.3 Medium 2026-10-05
CVE-2026-101887 BlueALSA bluealsad 除零拒绝服务漏洞 — bluez-alsa 3.5 Low 2026-10-01
CVE-2026-47534 NVIDIA驱动内核层除零漏洞致拒绝服务 — GeForce 5.5 Medium 2026-09-30
CVE-2026-93589 ImageMagick 7.1.2-31 前FLIF编码器除零漏洞 — ImageMagick 3.7 Low 2026-09-18
CVE-2026-92881 vgmstream AWB解析器除零漏洞 — vgmstream 4.3 Medium 2026-09-17
CVE-2026-91955 FreeRDP 数字错误漏洞 — FreeRDP 7.5 High 2026-09-15
CVE-2026-15417 Silicon Labs silabser.sys driver 数字错误漏洞 — silabser.sys driver 6.9 Medium 2026-09-10
CVE-2026-6244 The Tcpdump Group LIBPCAP 数字错误漏洞 — libpcap 5.5 Medium 2026-09-05
CVE-2026-85458 xpdf 数字错误漏洞 — Xpdf 2.1 Low 2026-09-03
CVE-2026-16897 IBM AIX 数字错误漏洞 — AIX 4.4 Medium 2026-08-19
CVE-2026-63117 FreeRDP 数字错误漏洞 — FreeRDP 6.5 Medium 2026-08-19
CVE-2026-64951 Rapid7 velociraptor 数字错误漏洞 — Velociraptor 3.5 Low 2026-08-12
CVE-2026-19025 The HDF Group HDF5 数字错误漏洞 — HDF5 6.8 Medium 2026-08-05
CVE-2026-67302 FreeRDP 数字错误漏洞 — FreeRDP 4.3 Medium 2026-08-01
CVE-2026-7007 zephyrproject zephyr 数字错误漏洞 — zephyr 4.6 Medium 2026-07-24
CVE-2026-10679 zephyrproject zephyr 数字错误漏洞 — zephyr 3.3 Low 2026-07-21
CVE-2026-61378 AutomationDirect Productivity Suite 数字错误漏洞 — Productivity Suite 5.5 Medium 2026-07-16

CWE-369(除零错误) 是常见的弱点类别,本平台收录该类弱点关联的 170 条 CVE 漏洞。