CWE-1325.

RCE via stale global state

• PHP
• Memory corruption
• CWE-755

RCE via OOM corruption

• PHP
• Memory corruption
• CWE-755

MessagePack: Nested arrays can blow past buffer length limits

• CWE-1325

<2.5.303 || >=3.0.0, <3.1.9 · fixed in 2.5.303, 3.1.9

Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability

• CWE-1325

>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

Mermaid XY Charts are vulnerable to an infinite loop DoS

• Denial of service
• CWE-1325

>=10.6.0, <10.9.8 || >=11.0.0-alpha.1, <11.16.1 · fixed in 10.9.8, 11.16.1

Samsung Open Source rlottie: Improperly controlled sequential memory allocation vulnerability in Samsung Open Source…

• Samsung Open Source rlottie
• CWE-1325

veraPDF Parser DoS via PostScript Type 1 Font Programs

• CWE-1325

<1.30.2 || >=1.31.1, <1.31.23 · fixed in 1.30.2, 1.31.23

veraPDF Parser DoS via PostScript CMap Streams

• CWE-1325

<1.30.2 || >=1.31.1, <1.31.23 · fixed in 1.30.2, 1.31.23

A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

• MongoDB Server
• CWE-1325

Guzzle: Unbounded response cookies risk denial of service

• Denial of service
• CWE-1325

<7.15.1 · fixed in 7.15.1

Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

• OpenSSL
• CWE-1325

Post-auth memory exhaustion via bitwise match expressions

• MongoDB, Inc. MongoDB Server
• CWE-1325

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)

• Information disclosure
• Denial of service

>=2.0.0, <2.1.1 · fixed in 2.1.1

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

weixin4j has Improperly Controlled Sequential Memory Allocation

• CWE-1325

<=1.10.2 · no fixed version yet

Improperly Controlled Sequential Memory Allocation in Wireshark

• Wireshark
• CWE-1325

SmallRye Fault Tolerance out-of-memory (OOM) issue

• CWE-1325

>=6.3.0, <6.4.2 || >=6.5.0, <6.9.0 · fixed in 6.4.2, 6.9.0

Siemens SIMATIC Energy Manager Basic: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions <…

• Siemens SIMATIC Energy Manager Basic
• Siemens SIMATIC Energy Manager PRO
• CWE-1325

The issue was addressed with improved checks.

• Apple iOS and iPadOS
• Apple macOS
• CWE-1325

The issue was addressed with improved memory handling.

• Apple iOS and iPadOS
• Apple macOS
• CWE-1325

Unbounded memory growth with session handling in TLSv1.3

• OpenSSL
• CWE-1325

A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

• ISC BIND 9
• CWE-1325

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

• Juniper Networks Junos OS
• Juniper Networks AppID Service Sigpack
• CWE-1325

Memory exhaustion in routinator

• Memory corruption
• CWE-1325

>=0.9.0, <0.10.2 · fixed in 0.10.2