CWE-835 · Loop with Unreachable Exit Condition (Infinite Loop) (page 3)
Page 3 of 10 — CVEs classified under CWE-835, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-20136 | High | 8.6 | 2025-08-14 | A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security Applia… |
CVE-2025-7054 | Medium | 6.5 | 2025-08-07 | Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames. QUIC connections possess a… |
CVE-2023-2593 | Medium | 5.9 | 2025-07-30 | A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This v… |
CVE-2025-8194 | High | 7.5 | 2025-07-28 | There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archi… |
CVE-2024-58261 | Low | 2.9 | 2025-07-27 | The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertPa… |
CVE-2025-53015 | High | 7.5 | 2025-07-14 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing… |
CVE-2025-53628 | High | 8.8 | 2025-07-10 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitt… |
CVE-2025-42954 | Low | 2.7 | 2025-07-08 | SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any… |
CVE-2025-2962 | High | 7.5 | 2025-06-24 | A denial-of-service issue in the dns implemenation could cause an infinite loop. |
CVE-2025-6365 | Medium | 5.7 | 2025-06-20 | A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical. Affected by this issue is the function… |
CVE-2022-50008 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: kprobes: don't call disarm_kprobe() for disabled kprobes The assumption in __disable_kpro… |
CVE-2025-0673 | High | 7.5 | 2025-06-12 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2, allow an attacker t… |
CVE-2025-48879 | Medium | 6.5 | 2025-06-10 | OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-d… |
CVE-2025-30145 | High | 7.5 | 2025-06-10 | GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rend… |
CVE-2025-5399 | High | 7.5 | 2025-06-07 | Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop… |
CVE-2025-38001 | High | 7.8 | 2025-06-06 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: … |
CVE-2024-22654 | High | 7.5 | 2025-05-29 | tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. |
CVE-2025-37859 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker We noticed the kworker in page_… |
CVE-2023-53133 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() When t… |
CVE-2023-53089 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode Syzbot reported a hung task problem: =====… |
CVE-2023-53051 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running… |
CVE-2025-3857 | High | 7.5 | 2025-04-21 | When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underl… |
CVE-2024-58097 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While processing the m… |
CVE-2025-32947 | High | 7.5 | 2025-04-15 | This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receivi… |
CVE-2025-29918 | Medium | 6.2 | 2025-04-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to… |
CVE-2025-32029 | | 2025-04-07 | ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolut… | |
CVE-2025-21971 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_back… |
CVE-2025-21942 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix extent range end unlock in cow_file_range() Running generic/751 on the… |
CVE-2023-53026 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after sel… |
CVE-2025-21871 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's po… |
CVE-2025-2838 | Medium | 6.5 | 2025-03-26 | Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a d… |
CVE-2024-9340 | High | 7.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending ma… |
CVE-2024-12704 | High | 7.5 | 2025-03-20 | A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The stream_com… |
CVE-2024-10907 | High | 7.5 | 2025-03-20 | In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by… |
CVE-2024-10829 | High | 7.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers t… |
CVE-2024-10821 | High | 7.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauthenticated… |
CVE-2025-29776 | | 2025-03-14 | Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate in… | |
CVE-2025-21850 | Critical | 9.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pendi… |
CVE-2025-27497 | | 2025-03-05 | OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to become unresp… | |
CVE-2025-1695 | Medium | 5.3 | 2025-03-04 | In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resour… |
CVE-2022-49317 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO all the t… |
CVE-2022-49097 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempool_alloc() In a low memory situation… |
CVE-2024-6790 | Medium | 6.1 | 2025-02-03 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th G… |
CVE-2025-21681 | Medium | 5.5 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag… |
CVE-2025-21668 | Medium | 5.5 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: add missing loop break condition Currently imx8mp_blk_ctrl_rem… |
CVE-2025-21667 | Medium | 5.5 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap_write_del… |
CVE-2025-21665 | Medium | 5.5 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_seek_hole_dat… |
CVE-2024-40675 | High | 7.5 | 2025-01-28 | In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no addi… |
CVE-2025-0290 | Medium | 4.3 | 2025-01-28 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7… |
CVE-2024-57940 | Medium | 5.5 | 2025-01-21 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is corrupted so that a… |
CVE-2025-23221 | Medium | 5.4 | 2025-01-20 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the… |
CVE-2024-57884 | Medium | 5.5 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() … |
CVE-2024-53685 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATH_MAX If the full path to be built by ceph_mdsc_bui… |
CVE-2024-47794 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop… |
CVE-2024-56703 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have be… |
CVE-2024-55565 | Medium | 4.3 | 2024-12-09 | nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. |
CVE-2024-11941 | High | 7.5 | 2024-12-05 | A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8. |
CVE-2024-53980 | High | 7.5 | 2024-11-29 | RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. A m… |
CVE-2024-11612 | Medium | 6.5 | 2024-11-22 | 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected i… |
CVE-2024-11595 | High | 7.8 | 2024-11-21 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file |
CVE-2024-53055 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for… |
CVE-2024-50272 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos val… |
CVE-2017-13313 | Medium | 6.5 | 2024-11-15 | In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect boun… |
CVE-2024-50321 | High | 7.5 | 2024-11-12 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-50320 | High | 7.5 | 2024-11-12 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-50319 | High | 7.5 | 2024-11-12 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-11097 | Low | 3.3 | 2024-11-12 | A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2024-52532 | High | 7.5 | 2024-11-11 | GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. |
CVE-2024-33623 | Low | 3.7 | 2024-10-30 | A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a rebo… |
CVE-2024-50011 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item There is no links_num in st… |
CVE-2024-49856 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node search When the current node doesn't have an EPC s… |
CVE-2024-43512 | Medium | 6.5 | 2024-10-08 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-46701 | Medium | 5.5 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations f… |
CVE-2024-45692 | High | 7.5 | 2024-09-04 | Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000. |
CVE-2024-45395 | Low | 3.1 | 2024-09-04 | sigstore-go, a Go library for Sigstore signing and verification, is susceptible to a denial of service attack in versions prior to 0.6.1 when a verifier is pro… |
CVE-2024-45506 | High | 7.5 | 2024-09-04 | HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) un… |
CVE-2024-8088 | | 2024-08-22 | There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class i… | |
CVE-2024-43828 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infin… |
CVE-2024-43366 | High | 7.5 | 2024-08-15 | zkvyper is a Vyper compiler. Starting in version 1.3.12 and prior to version 1.5.3, since LLL IR has no Turing-incompletness restrictions, it is compiled to a… |
CVE-2024-42246 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using… |
CVE-2024-42240 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mitigation When BHI mitigation is enable… |
CVE-2024-42358 | Medium | 6.2 | 2024-08-06 | PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the TTF parser. Maliciously crafted TTF file… |
CVE-2024-23352 | High | 7.5 | 2024-08-05 | Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA. |
CVE-2024-41088 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when xmit fails When the mcp251xfd_start_xmit() functio… |
CVE-2024-40060 | High | 7.5 | 2024-07-23 | go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function. |
CVE-2022-48862 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In vhost_iotlb_add_range_ctx(), ran… |
CVE-2022-48840 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 ("iavf: Add waiting so t… |
CVE-2022-48780 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback function… |
CVE-2024-40995 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hang… |
CVE-2024-6614 | Medium | 4.3 | 2024-07-09 | The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128… |
CVE-2024-5569 | Medium | 6.2 | 2024-07-09 | A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processi… |
CVE-2024-6227 | High | 7.5 | 2024-07-08 | A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This… |
CVE-2024-36990 | Medium | 6.5 | 2024-07-01 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that… |
CVE-2024-36288 | Critical | 9.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[]… |
CVE-2021-47617 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected b… |
CVE-2024-6061 | Low | 3.3 | 2024-06-17 | A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_p… |
CVE-2024-5949 | Medium | 6.5 | 2024-06-13 | Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a… |
CVE-2023-50763 | Medium | 4.9 | 2024-06-11 | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versio… |
CVE-2024-36732 | High | 7.5 | 2024-06-06 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.tensordot. |
CVE-2024-32976 | High | 7.5 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data w… |