CWE-755.

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID

• PMQS IO::Compress
• CWE-755

multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing

• CWE-755

<4.3.0 · fixed in 4.3.0

Prometheus exporter process crash via malformed HTTP request

• CWE-755

>=0.55.0, <0.75.0 · fixed in 0.75.0

free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types

• Memory corruption
• CWE-20

<1.4.3 · fixed in 1.4.3

free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)

• Denial of service
• CWE-20

<1.2.3 · fixed in 1.2.3

ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI

• Authentication bypass
• CWE-755

<1.4.8-0.20260503041146-eab62379c795 · fixed in 1.4.8-0.20260503041146-eab62379c795

rpassword affected by partial password reveal when input is interrupted

• Information disclosure
• CWE-755

<7.5.0 · fixed in 7.5.0

Granian vulnerable to DoS via WSGI response header panic

• CWE-248
• CWE-755

>=0.2.0, <2.7.4 · fixed in 2.7.4

nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals

• CWE-252
• CWE-755

<=0.2.0 · no fixed version yet

.NET Framework Denial of Service Vulnerability

• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.7.2
• CWE-366
• CWE-755

justhtml includes multiple security fixes

• Cross-site scripting (XSS)
• CWE-20

<1.15.0 · fixed in 1.15.0

@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service

• CWE-755

<2.57.1 · fixed in 2.57.1

RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

• rustdesk-client RustDesk Client
• CWE-345
• CWE-755

Improper handling of exceptional conditions in Huawei HarmonyOS and others

• Huawei HarmonyOS
• Huawei EMUI
• CWE-755

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

• Memory corruption
• Denial of service

<1.12.2 · fixed in 1.12.2

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

• CWE-755

<2.11.1 · fixed in 2.11.1

Panic when dropping a `[Typed]Func::call_async` future

• CWE-755

>=39.0.0, <40.0.4 || >=41.0.0, <41.0.4 · fixed in 40.0.4, 41.0.4

Cube Core is vulnerable to Denial of Service (DoS) via crafted request

• CWE-755

>=1.1.17, <1.4.2 || >=1.5.0, <1.5.13 · fixed in 1.4.2, 1.5.13

VB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache

• VB-Audio Software Voicemeeter (Standard)
• VB-Audio Software Voicemeeter Banana
• CWE-755

Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash

• Juniper Networks Junos OS
• CWE-755

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

• Juniper Networks Junos OS
• CWE-755

RustFS gRPC GetMetrics deserialization panic enables remote DoS

• CWE-755

>=1.0.0-alpha.13, <1.0.0-alpha.78 · fixed in 1.0.0-alpha.78

SIPGO is Vulnerable to Response DoS via Nil Pointer Dereference in github.com/emiago/sipgo

• Memory corruption
• CWE-755

<1.0.0-alpha-1 · fixed in 1.0.0-alpha-1

matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events

• CWE-755

>=0.0.0-0, <0.16.0 · fixed in 0.16.0

DoS vulnerability in Vilar VS-IPC1002 IP cameras

• Vilar VS-IPC1002
• CWE-755

Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

• Rockwell Automation ArmorStart AOP
• CWE-755

quic-go: Panic occurs when queuing undecryptable packets after handshake completion

• Denial of service
• CWE-755

<0.49.1 || >=0.50.0, <0.54.1 · fixed in 0.49.1, 0.54.1

Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• CWE-755
• CWE-1104

Duplicate Advisory: Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

• CWE-755

<0.0.31 · fixed in 0.0.31

Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

• CWE-693
• CWE-755

<0.0.31 · fixed in 0.0.31

Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

• Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT
• CWE-755

Volto affected by possible DoS by invoking specific URL by anonymous user

• CWE-755

<16.34.0 || >=17.0.0, <17.22.1 || >=18.0.0, <18.24.0 || >=19.0.0-alpha.1, <19.0.0-alpha.4 · fixed in 16.34.0, 17.22.1, 18.24.0, 19.0.0-alpha.4

Improper handling of exceptional conditions in Huawei HarmonyOS

• Huawei HarmonyOS
• CWE-755

Possible host crash with host-to-wasm component intrinsics

• CWE-755

>=38.0.0, <38.0.3 · fixed in 38.0.3

x86: Incorrect stubs exception handling for flags recovery

• Xen
• CWE-755

Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled

• Juniper Networks Junos OS
• CWE-755

Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash

• Juniper Networks Junos OS
• CWE-755

Improper handling of exceptional conditions in Siemens RUGGEDCOM i800 and others

• Siemens RUGGEDCOM i800
• Siemens RUGGEDCOM i801
• CWE-755

REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure

• OP-TEE optee_os
• CWE-755

hydra-node dangerously assumes L1 event finality and does not consider failed transactions

• cardano-scaling hydra
• CWE-755

ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

• Centreon web
• CWE-755

React Router allows a DoS via cache poisoning by forcing SPA mode

• CWE-755

>=7.2.0, <7.5.2 · fixed in 7.5.2

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-755

LlamaIndex Improper Handling of Exceptional Conditions vulnerability

• Denial of service
• CWE-755

<0.12.6 · fixed in 0.12.6

Cosmos SDK: x/group can halt when erroring in EndBlocker

• CWE-755

<0.47.17 || >=0.50.0-alpha.0, <0.50.13 · fixed in 0.47.17, 0.50.13

5380/5580 Denial-of-Service Vulnerability

• Rockwell Automation GuardLogix 5580 SIL 3
• Rockwell Automation Compact GuardLogix 5380 SIL 3
• CWE-755

Elastic Defend Improper Handling of Alternate Encoding Leads to Crash

• Elastic Defend
• CWE-755

SCP-Firmware Vulnerability

• Arm SCP-Firmware
• CWE-755

SCP-Firmware Vulnerability

• Arm SCP-Firmware
• CWE-755

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash

• Juniper Networks Junos OS
• CWE-755

Improper Input Validation

• Hanwha Vision Co., Ltd. XRN-420S
• CWE-755

Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration

• Google Cloud Platform Vertex Gemini API
• CWE-755

Nanopb does not release memory on error return when using PB_DECODE_DELIMITED

• nanopb
• Denial of service
• CWE-755

Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges

• Broken access control
• CWE-755

>=1.16.0, <1.16.4 · fixed in 1.16.4

HPE NonStop DISK UTIL, Local Denial of Service vulnerability

• Hewlett Packard Enterprise HPE NonStop DISK UTIL
• CWE-755

media: dvbdev: prevent the risk of out of memory access

• Linux kernel
• CWE-755

Improper handling of exceptional conditions in Arm SCP-Firmware

• Arm SCP-Firmware
• CWE-755

nilfs2: propagate directory read errors from nilfs_find_entry()

• Linux kernel
• CWE-755

remoteproc: k3-r5: Fix error handling when power-up failed

• Linux kernel
• CWE-755