Denial of service.

Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

• illumos-gate
• OmniOS
• Denial of service

Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

• illumos-gate
• OmniOS
• Denial of service

Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

• open5gs
• Denial of service

Strawberry legacy graphql-ws retains naturally completed subscription slots

• Denial of service

>=0.312.3, <0.327.2 · fixed in 0.327.2

Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits

• Apache Software Foundation Apache CXF
• Denial of service

Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.

• Apache Software Foundation Apache CXF
• Denial of service

Apache CXF: FIQL Query Parser Denial of Service

• Apache Software Foundation Apache CXF
• Denial of service

Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

• Denial of service

>=0.8.0, <0.17.1 · fixed in 0.17.1

Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints

• MongoDB Ops Manager
• Denial of service

Resource allocation without limits in OpenPrinting CUPS

• OpenPrinting CUPS
• Denial of service

EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service.

• Denial of service

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing.

• Denial of service

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic.

• Denial of service

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path.

• Denial of service

Lack of limit on size of parsed Range headers in net/http

• Denial of service

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

• Denial of service

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

Satel Netco Design Inefficient Regular Expression Complexity

• Satel Netco Design
• Denial of service

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Denial of service

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Denial of service

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

• Denial of service

<11.16.0 · fixed in 11.16.0

music-metadata: Uncontrolled memory allocation in APEv2 parser

• Denial of service

<11.16.0 · fixed in 11.16.0

music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

• Denial of service

<11.16.0 · fixed in 11.16.0

music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort

• Denial of service

<11.16.0 · fixed in 11.16.0

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

• Denial of service

>=2.10.0, <2.53.0 · fixed in 2.53.0

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

• Denial of service

<2.9.1 · fixed in 2.9.1

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

• Denial of service
• CWE-178

<1.0.0 · fixed in 1.0.0

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

• Denial of service

<1.0.0 · fixed in 1.0.0

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

• Denial of service
• CWE-248

<11.15.0 · fixed in 11.15.0

amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

• Denial of service

<1.14.0 · fixed in 1.14.0

music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length

• Borewit music-metadata
• Denial of service

IBM Guardium Data Protection Denial of Service

• IBM Guardium Data Protection
• Denial of service

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

• Denial of service

>=3.0.0, <3.8.0 · fixed in 3.8.0

Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion

• Denial of service

>=3.0.0, <3.8.0 · fixed in 3.8.0

Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)

• Denial of service

>=3.0.0, <3.8.1 · fixed in 3.8.1

Pydantic AI: Excessive resource use when local web fetching converts nested HTML

• Denial of service

>=1.77.0, <1.107.7 || >=2.0.0b1, <2.52.0 · fixed in 1.107.7, 2.52.0

msgpack5: Many buffered values can exhaust the streaming decoder stack

• Denial of service

<6.1.0 · fixed in 6.1.0

msgpack5: Deeply nested input can exhaust the decoder stack

• Denial of service

<6.1.0 · fixed in 6.1.0

msgpack5: Quadratic parsing in the streaming decoder

• Denial of service

<6.1.0 · fixed in 6.1.0

FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c

• FFmpeg
• Denial of service

FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist

• FFmpeg
• Denial of service

Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

• Denial of service

>=1.77.0, <1.107.2 || >=2.0.0b1, <2.24.0 · fixed in 1.107.2, 2.24.0

Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

• Denial of service

>=2.1.0, <2.11.1-0.20260930021559-01a9ff32fb3c · fixed in 2.11.1-0.20260930021559-01a9ff32fb3c

AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled

• Denial of service
• CWE-409

>=3.0.0, <3.0.14 || >=2.2.0, <=2.16.1 · fixed in 3.0.14

Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`

• Denial of service

>=1.77.0, <1.107.6 || >=2.0.0b1, <2.44.0 · fixed in 1.107.6, 2.44.0

Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

• Denial of service

>=2.3.1, <2.11.1-0.20260912113515-5f636f9dcde5 · fixed in 2.11.1-0.20260912113515-5f636f9dcde5

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

• Denial of service

>=2.8.1, <2.11.1-0.20260911060113-ea12859e43c6 · fixed in 2.11.1-0.20260911060113-ea12859e43c6

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

• Denial of service

<0.4.1 · fixed in 0.4.1

FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes

• FFmpeg
• Denial of service

FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media

• FFmpeg
• Denial of service

Allocation of Resources Without Limits or Throttling in hMailServer

• Progressive Robot Ltd hMailServer
• Denial of service

Allocation of Resources Without Limits or Throttling in hMailServer

• Progressive Robot Ltd hMailServer
• Denial of service

IBM DataPower Gateway Denial of Service

• IBM DataPower Gateway 10.6CD
• IBM DataPower Gateway 10.6.0
• Denial of service

IBM DataPower Gateway Denial of Service

• IBM DataPower Gateway 11.0.0
• Denial of service

IBM DataPower Gateway Denial of Service

• IBM DataPower Gateway 10.6CD
• IBM DataPower Gateway 10.6.0
• Denial of service

Uncontrolled recursion in DCMTK JSON reader allows denial of service

• OFFIS DCMTK
• Denial of service

Uncontrolled recursion in DCMTK xml2dcm allows denial of service

• OFFIS DCMTK
• Denial of service

Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

• OFFIS DCMTK
• Denial of service

Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service

• OFFIS DCMTK
• Denial of service

Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service

• OFFIS DCMTK
• Denial of service

Inefficient Algorithmic Complexity in hMailServer

• Progressive Robot Ltd hMailServer
• Denial of service