Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 4.8 Medium
GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
- CVSS 4.8 Medium
GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
- CVSS 4.8 Medium
GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
- CVSS 6.5 Medium
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Apple macOS
- Apple macOS
- Denial of service
- CVSS 5.5 Medium
Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
- CWE-248
- CVSS 7.5 High
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- IBM Verify Identity Access
- IBM Security Verify Access
- Denial of service
- CVSS 5.3 Medium
FFmpeg Duration hlsproto.c parse_playlist denial of service
- FFmpeg
- Denial of service
- CVSS 6.5 Medium
IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption
- IBM Db2
- Denial of service
- CVSS 6.5 Medium
Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS
- zephyr
- Denial of service
- CVSS 8.7 High
webhook through 2.8.3 Memory Exhaustion via Oversized Request Body
- adnanh webhook
- Denial of service
- CVSS 8.2 High
DotVVM: ReDOS in routing
- riganti dotvvm
- Denial of service
- CVSS 4.8 Medium
GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
- CVSS 4.6 Medium
Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size
- zephyr
- Denial of service
- CVSS 5.3 Medium
GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference
- GPAC
- Denial of service
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder
- Apache Software Foundation Apache Storm Worker
- Denial of service
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC
- Apache Software Foundation Apache Storm DRPC
- Denial of service
- CVSS 4.3 Medium
Mattermost Server Algorithmic DoS via Unbounded Markdown Block Nesting
- Mattermost
- Denial of service
- CVSS 6.9 Medium
Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion
- Dvidelabs flatcc
- Denial of service
- CVSS 6.9 Medium
Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion
- Dvidelabs flatcc
- Denial of service
- CVSS 6.9 Medium
Dvidelabs flatcc semantics.c fb_clear_parser memory leak
- Dvidelabs flatcc
- Denial of service
- CVSS 7.1 High
File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
- filebrowser
- Denial of service
- CVSS 7.1 High
filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
- filebrowser
- Denial of service
- CVSS 4.8 Medium
vllm-project vLLM tiktoken vocab File mod.rs new denial of service
- vLLM
- Denial of service
- CVSS 5.3 Medium
Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service
- Gitlawb openclaude
- Denial of service
- CVSS 4.3 Medium
Mattermost Markdown autolink parsing denial of service
- Mattermost
- Denial of service
- CVSS 4.3 Medium
Fix authenticated members disabling file content indexing server-wide via extraction pool exhaustion
- Mattermost
- Denial of service
- CVSS 2.4 Low
GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion
- GPAC
- Denial of service
- CVSS 2.4 Low
GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion
- GPAC
- Denial of service
- CVSS 4.8 Medium
GPAC MP4Box base_scenegraph.c gf_node_unregister assertion
- GPAC
- Denial of service
- CVSS 4.8 Medium
GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
- GNU libredwg
- Denial of service
- Memory corruption
- CVSS 4.8 Medium
GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion
- GPAC
- Denial of service
- CVSS 4.8 Medium
GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion
- GPAC
- Denial of service
- CVSS 4.8 Medium
GPAC MP4Box loader_xmt.c xmt_parse_element assertion
- GPAC
- Denial of service
- CVSS 4.8 Medium
GPAC MP4Box vrml_tools.c null pointer dereference
- GPAC
- Denial of service
- Memory corruption
- CVSS 2.8 Low
Infinite loop in Samsung Exynos 850 firmware
- Samsung Exynos 850 firmware
- Denial of service
- CVSS 5.3 Medium
Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service
- zephyr
- Denial of service
- CVSS 6.9 Medium
TooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
- TooTallNate Java-WebSocket
- Denial of service
- CVSS 6.9 Medium
evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption
- evanchiu serverless-todo
- Denial of service
- CVSS 4.8 Medium
GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference
- GPAC
- Denial of service
- Memory corruption
- CVSS 4.8 Medium
GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference
- GPAC
- Denial of service
- Memory corruption
- CVSS 7.5 High
Duplicate Advisory: Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)
- Denial of service
>=9.1.0, <=10.0.4 · no fixed version yet
GHSA-vm5r-23w9-m8hx - CVSS 8.7 High
Resource allocation without limits in UnrealIRCd
- UnrealIRCd
- Denial of service
- CVSS 6.8 Medium
IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference
- IOBit Uninstaller
- Denial of service
- Memory corruption
- CVSS 6.9 Medium
vLLM before 0.28.0 Denial of Service via audio extraction
- vLLM
- Denial of service
- CVSS 6.9 Medium
msgpack-java through 0.9.12 Stack Overflow via Nested Arrays
- msgpack-java
- Denial of service
- CVSS 7.5 High
AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server
- SimulPiscator AirSane
- Denial of service
- CVSS 10.0 CriticalCritical · CVSS 9+
Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns
- Apache Software Foundation Apache OpenNLP
- Denial of service
- CVSS 7.5 High
Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer
- Apache Software Foundation Apache OpenNLP
- Denial of service
- CVSS 8.7 High
Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read
- Net-SNMP
- Denial of service
- CWE-1088
- CVSS 8.7 High
libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
- libp2p-rendezvous
- Memory corruption
- Denial of service
- CVSS 7.5 High
multiparty vulnerable to Denial of Service via unbounded part-header accumulation
- multiparty
- Denial of service
- CVSS 7.5 High
Infinite loop in strongSwan
- strongSwan
- Denial of service
- CVSS 3.7 Low
Memory leak in strongSwan
- strongSwan
- Denial of service
- CVSS 5.9 Medium
Infinite loop in strongSwan
- strongSwan
- Denial of service
- CVSS 3.7 Low
Memory leak in strongSwan
- strongSwan
- Denial of service
- CVSS 3.7 Low
Memory leak in strongSwan
- strongSwan
- Denial of service
- CVSS 4.2 Medium
Stack overflow in nscd due to unbounded alloca use
- The GNU C Library glibc
- Denial of service
- CVSS 7.5 High
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback() i…
- Denial of service