VulnSea

CWE-835

CVEs classified under CWE-835, newest first.

119 CVEsRSS

CVE-2026-46385High· 7.5PoC
4mo ago

iskorotkov/avro is a fast Go Avro codec

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHea…

▾ Midnightiskorotkov · avroEPSS 0.88%via NVD
CVE-2026-49017Medium· 6.5
4mo ago

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-s…

▾ Sunlitopenstack · swiftEPSS 0.36%via NVD
CVE-2026-34962Medium· 6.2
4mo ago

barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directory entry length values are non-zero

barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directory entry length values are non-zero. A…

▾ Sunlitpengutronix · bareboxEPSS 0.18%via NVD
CVE-2026-4890High· 7.5
4mo ago

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.

▾ TwilightEPSS 1.1%via NVD
CVE-2026-33814High· 7.5
4mo ago

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

▾ Twilightgolang · goEPSS 0.87%via NVD
CVE-2026-34282High· 7.5
5mo ago

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.…

▾ Twilightoracle · jreEPSS 0.89%via NVD
CVE-2026-33116High· 7.5
5mo ago

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

▾ Twilightmicrosoft · .netEPSS 2.4%via NVD
CVE-2026-39934None
5mo ago

Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue was remediated …

▾ SunlitEPSS 0.43%via NVD
CVE-2026-23451High· 7.5
5mo ago

In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points…

In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points…

▾ Twilightlinux · linux_kernelEPSS 0.44%via NVD
CVE-2026-23472Medium· 5.5
5mo ago

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write() behave inconsistently when xmit_buf is NULL (which happens for PORT_…

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write() behave inconsistently when xmit_buf is NULL (which happens for PORT_…

▾ Sunlitlinux · linux_kernelEPSS 0.12%via NVD
CVE-2026-33891High· 7.5
6mo ago

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, a Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInt…

▾ Twilightdigitalbazaar · forgeEPSS 0.90%via NVD
CVE-2026-4598High· 7.5PoC
6mo ago

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang th…

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang th…

▾ Midnightkjur · jsrsasignEPSS 0.96%via NVD
CVE-2026-30922High· 7.5PoC
6mo ago

pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)

An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x3…

▾ MidnightRed Hat · Red Hat Enterprise Linux AppStream (v. 10)EPSS 0.93%via CSAF
CVE-2026-4111High· 7.5
6mo ago

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter…

▾ TwilightEPSS 0.88%via NVD
CVE-2026-20054Medium· 5.8
6mo ago

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.  This vulnerability is due to improper error …

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.  This vulnerability is due to improper error …

▾ Sunlitcisco · snortEPSS 0.43%via NVD
CVE-2026-27628High· 7.5
7mo ago

pypdf: possible infinite loop when loading circular /Prev entries in cross-reference streams (CVE-2026-27628)

A flaw was found in pypdf. Processing a specially crafted PDF document, specifically with circular /Prev references in the cross-reference (xref) chain, can cause an infinite loop and a high consumption of CPU, resulting in a denial of ser…

▾ TwilightRed Hat · Red Hat Quay 3.16EPSS 0.61%via CSAF
CVE-2025-69227High· 7.5
8mo ago

aiohttp: aiohttp: Denial of Service via specially crafted POST request (CVE-2025-69227)

A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provide…

▾ TwilightRed Hat · Red Hat Ansible Automation Platform 2EPSS 0.39%via CSAF
CVE-2025-20312High· 7.7
1y ago

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability i…

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability i…

▾ Twilightcisco · ios_xeEPSS 0.39%via NVD
CVE-2023-2593Medium· 5.9
1y ago

A flaw exists within the Linux kernel's handling of new TCP connections

A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service …

▾ SunlitEPSS 0.73%via NVD
CVE-2025-8194High· 7.5
1y ago

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and dea…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.64%via NVD
CVE-2025-21850Critical· 9.8
1y ago

In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to z…

In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to z…

▾ Midnightlinux · linux_kernelEPSS 0.41%via NVD
CVE-2022-49317Medium· 5.5
1y ago

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO all the time which give an infinite loop to flush node page like below

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO all the time which give an infinite loop to flush node page like below. Let's avoid it.…

▾ Sunlitlinux · linux_kernelEPSS 0.23%via NVD
CVE-2024-56703Medium· 5.5
1y ago

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have been observed on a cluster of Linux-based edge routers located in a highly dynam…

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have been observed on a cluster of Linux-based edge routers located in a highly dynam…

▾ Sunlitlinux · linux_kernelEPSS 0.50%via NVD
CVE-2022-23352High· 7.5
4y ago

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

▾ Twilightbigantsoft · bigant_serverEPSS 1.6%via NVD
CVE-2022-23437Medium· 6.5
4y ago

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resourc…

▾ Sunlitapache · xerces-jEPSS 12%via NVD
CVE-2021-33194High· 7.5
5y ago

golang: x/net/html: infinite loop in ParseFragment (CVE-2021-33194)

A flaw was found in golang. An attacker can craft an input to ParseFragment within parse.go that would cause it to enter an infinite loop and never return. The greatest threat to the system is of availability.

▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4EPSS 7.5%via CSAF
CVE-2020-13935High· 7.5PoC
6y ago

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requ…

▾ Midnightapache · tomcatEPSS 87%via NVD
CVE-2020-14040High· 7.5
6y ago

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vuln…

▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.6EPSS 1.8%via CSAF
CVE-2017-13728High· 7.5
9y ago

There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic

There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.

▾ Twilightinvisible-island · ncursesEPSS 3.9%via NVD
CWE-835 vulnerabilities (CVEs) — page 4 · VulnSea