CWE-248.

Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic

• kyverno
• CWE-248

Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic

• kyverno
• CWE-248

tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

• tsparticles
• @tsparticles mcp-server
• CWE-248

svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag

• darylldoyle svg-sanitizer
• CWE-248

Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

• parse-community parse-server
• CWE-248

FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

• FreeRDP
• CWE-248

In multiple locations, there is a possible permission bypass due to an uncaught exception.

• Google Android
• CWE-248

In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.

• Google Android
• CWE-248

fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

• fastify
• CWE-248

@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

• @fastify/cors
• CWE-248

Null pointer dereference vulnerability in the ArkWeb module.

• Huawei HarmonyOS
• CWE-248

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

• Memory corruption
• CWE-248

<1.4.1 · fixed in 1.4.1

Aedes has Uncaught Exception and Uncontrolled Resource Consumption

• moscajs aedes
• Denial of service
• CWE-248

llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length

• ggml-org llama.cpp
• CWE-248

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

• Denial of service
• CWE-248

>=4.2.1, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2 · fixed in 6.29.1, 7.30.1, 8.12.2

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

• CWE-248

>=7.15.0, <7.30.1 || >=8.0.0, <8.12.2 · fixed in 7.30.1, 8.12.2

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

• CWE-248
• CWE-704

>=6.7.0, <6.16.1 · fixed in 6.16.1

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

• CWE-248
• CWE-754

>=8.11.0, <8.11.2 · fixed in 8.11.2

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

• WatchGuard Fireware OS
• Memory corruption
• CWE-248

Datadog dd-trace-py: IAST instrumentation can lead to application DOS

• CWE-248

>=3.13.0, <4.15.5 · fixed in 4.15.5

svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()

• darylldoyle svg-sanitizer
• CWE-248

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

• CWE-248
• CWE-459

>=6.23.0, <6.29.1 || >=7.18.0, <7.30.1 || >=8.0.0, <8.12.2 · fixed in 6.29.1, 7.30.1, 8.12.2

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

• Denial of service
• CWE-248

>=2.0.0, <2.5.0 · fixed in 2.5.0

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

• CWE-248

<1.20.9 || >=2.0.0, <2.4.0 · fixed in 1.20.9, 2.4.0

JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)

• Eclipse Foundation Eclipse KeyPont - GOSE
• CWE-248

LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion

• Eclipse Foundation Eclipse KeyPont - GOSE
• CWE-248

JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix

• Eclipse Foundation Eclipse KeyPont - GOSE
• CWE-248

AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV

• Eclipse Foundation Eclipse KeyPont - GOSE
• CWE-248

Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities

• Cisco TelePresence Video Communication Server (VCS) Expressway
• CWE-248

Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client

• Apache Software Foundation Apache bRPC
• CWE-248

vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate

• vllm
• CWE-248

Panic lowering a host-created component model stream into a guest that expects a different payload type

• Memory corruption
• CWE-248

>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 48.0.7, 49.0.4

Gitea panic on the repositories route of individual users

• Gitea
• Memory corruption
• CWE-248

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

• CWE-248
• CWE-755

>=1.9.4, <1.14.5 · fixed in 1.14.5

countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception

• countly-server
• CWE-248

Qwik: Crashing any Qwik Server via Resource thenable

• CWE-248

<1.20.0 · fixed in 1.20.0

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

• CWE-20
• CWE-248

<0.145.0 · fixed in 0.145.0

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

• Memory corruption
• CWE-248

>=0.136.0, <0.143.0 · fixed in 0.143.0

libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners

• js-libp2p
• @libp2p webrtc
• CWE-248
• CWE-755

HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability

• Hewlett Packard Enterprise HPE NonStop ANSI SQLUTIL
• CWE-248

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.

• Samsung Open Source Vyond
• CWE-248

Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error

• parse-community parse-server
• CWE-248

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

• rabbitmq-server
• CWE-248
• CWE-1286

RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation

• rabbitmq-server
• CWE-20
• CWE-248

Windows Failover Cluster Denial of Service Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• CWE-248

Windows Failover Cluster Denial of Service Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• CWE-248

Windows DNS Denial of Service Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• CWE-248

Fortinet FortiSandbox: An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox…

• Fortinet FortiSandbox
• CWE-248

SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values

• surrealdb
• CWE-248

Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URL

• parse-community parse-server
• CWE-248

MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

• CWE-248

>=3.3.0, <3.5.4 · fixed in 3.5.4

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

• Denial of service
• CWE-248

<11.15.0 · fixed in 11.15.0

Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

• CWE-248

>=2.3.1, <2.11.1-0.20260915055537-22f76f9acb94 · fixed in 2.11.1-0.20260915055537-22f76f9acb94

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

• CWE-172
• CWE-248

<5.36.0 · fixed in 5.36.0

Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

• Apache Software Foundation Apache YuniKorn
• CWE-248

Uncaught Exception in Elastic Endpoint Leading to Denial of Service

• Elastic Agent and Elastic Defend
• CWE-248

Gitea denial of service through external issue tracker patterns

• Gitea
• Memory corruption
• CWE-248

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

• CWE-20
• CWE-248

<0.30.0 · fixed in 0.30.0

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

• CWE-20
• CWE-248

<0.30.0 · fixed in 0.30.0

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

• CWE-248
• CWE-703

<3.12.2 · fixed in 3.12.2