Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.1 High
remote abort and memory disclosure from a malformed cursor.ns
- MongoDB C Driver
- Denial of service
- CVSS 8.7 High
MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)
- MongoDB C Driver
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service
- Elastic APM Server
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 7.5 High
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 5.3 Medium
phpMyAdmin ShapeFile SHP File loadFromFile infinite loop
- phpMyAdmin ShapeFile
- Denial of service
- CVSS 6.9 Medium
Potential memory exhaustion in MultiPartParser via base64-encoded file upload
- Django
- Denial of service
- CVSS 7.5 High
Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser
- Eclipse Foundation Eclipse Vert.x
- Denial of service
- CVSS 8.7 High
rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions
- rsync
- Denial of service
- CVSS 5.9 Medium
Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client
- Eclipse Foundation Eclipse Vert.x
- Denial of service
- CVSS 8.7 High
svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph
- darylldoyle svg-sanitizer
- Denial of service
- CVSS 6.9 Medium
Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing
- lepture mistune
- Denial of service
- CVSS 8.7 High
Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters
- lepture mistune
- Denial of service
- CVSS 7.1 High
SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization
- surrealdb
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2
- FreeRDP
- Denial of service
- CVSS 8.2 High
FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
- FreeRDP
- Denial of service
- CVSS 2.3 Low
FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST
- FreeRDP
- Denial of service
- CVSS 7.5 High
Missing Release of Memory after Effective Lifetime in µD3TN
- D3TN GmbH µD3TN
- Denial of service
-
Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter
- Eclipse Foundation Eclipse Mnestix
- Denial of service
- CVSS 5.5 Medium
Divide by zero in NVIDIA CUDA Toolkit and others
- NVIDIA CUDA Toolkit
- NVIDIA NVJPEG
- Denial of service
- CVSS 6.9 Medium
Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.
- AM System ALO Suite
- Denial of service
- CVSS 6.5 Medium
Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Denial of service
-
Apache JClouds: XML External Entity (XXE) in provider-response parsing
- Apache Software Foundation Apache JClouds
- Denial of service
- CVSS 8.7 High
NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool
- Eclipse Foundation Eclipse ThreadX
- Denial of service
- CVSS 6.2 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 6.9 Medium
Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()
- Nexbox A95X
- Amlogic Android SDK
- Denial of service
- CVSS 4.3 Medium
Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File
- The HDF Group HDF5
- Denial of service
- CVSS 7.5 High
CVE-2026-120596
- Ethernut / egnite GmbH Nut/Net TCP/IP Stack
- Denial of service
- CVSS 6.8 Medium
Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation
- Eclipse Foundation Eclipse ThreadX
- Denial of service
- CWE-667
- CVSS 6.8 Medium
Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser
- Ultra Video Group Kvazaar
- Denial of service
- CVSS 6.9 Medium
QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
- QuickJS-NG
- Denial of service
- CVSS 5.9 Medium
@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers
- @fastify/multipart
- Denial of service
- CVSS 5.7 Medium
Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
- CVSS 6.5 Medium
Uncontrolled resource consumption in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
- CVSS 4.3 Medium
Uncontrolled recursion in Huawei HarmonyOS
- Huawei HarmonyOS
- Denial of service
- CVSS 5.3 Medium
Reachable assertion in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Denial of service
- CVSS 5.3 Medium
Reachable assertion in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Denial of service
- CVSS 7.5 High
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server.
- Denial of service
- CVSS 7.5 High
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling.
- Denial of service
- CVSS 8.3 High
Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource
- Apache Software Foundation Apache Wicket
- Denial of service
- CVSS 8.3 High
Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names
- Apache Software Foundation Apache Wicket
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui HTTP Transport e.text resource consumption
- ag-ui
- Denial of service
-
Gitea Helm chart upload decompression denial of service
- Gitea
- Denial of service
- CWE-409
- CVSS 5.3 Medium
Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos
- Delgan loguru
- Denial of service