CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- color iccdeviccDEV has a stack overflow in CIccBasicStructFactory::CreateStruct()5.5 Medium
- ymfe yapiAn issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1...7.5 High
- nexus nexusinterfaceAn issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft...7.5 High
- coredns, red hat advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreCoreDNS Loop Detection Denial of Service Vulnerability7.5 High
- quickjs project quickjsA crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit...7.5 High
- gnu binutilsBinutils objdump contains a denial-of-service vulnerability when processing a crafted binary with...5.5 Medium
- gnu binutilsBinutils objdump contains a denial-of-service vulnerability when processing a crafted binary with...5.5 Medium
- gnu binutilsAn issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service...5.0 Medium
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +35 more +37 moreThe Eclipse Jetty Server Artifact has a Gzip request memory leak7.5 High
- python-markdown markdown, red hat external secrets operator for red hat openshift, multicluster engine for kubernetes +27 more +29 morePython-Markdown has an Uncaught Exception7.5 High
- yhirose cpp-httplibPayload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib7.5 High
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)7.5 High
- cisco snort, secure firewall threat defense (ftd) software, utd snort ips engine software +2 more +4 moreMultiple Cisco Products Snort 3 TBD Denial of Service Vulnerability5.8 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos-10 & aos-8) +1 moreMAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic Redirection5.4 Medium
- dji mavic mini firmware, mini se firmware, spark firmware +2 moreAn issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote...7.5 High
- openclawOpenClaw < 2026.3.2 - Tar Archive Safety Bypass in Skills Installation6.7 Medium
- openclawOpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing8.7 High
- djangoproject django, red hat ansible automation platform 2, discovery 2 +1 more +3 morePotential denial-of-service vulnerability in URLField via Unicode normalization on Windows7.5 High
- openclaw, openclaw voice-call, openclaw\/voice-call +2 moreOpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream8.7 High
- openclawOpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass8.7 High
- chainguard melangemelange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI4.3 Medium
- openclawOpenClaw < 2026.3.1 - Unbounded Memory Growth in Zalo Webhook via Query String Key Churn8.7 High
- olivetinOliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling7.5 High
- olivetinOliveTin: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint7.5 High
github.com/chainguard-dev/malcontentGomalcontent: Error-path cleanup gap can leak scanners and fds and degrade availability5.3 Medium- f textreamTextream Vulnerable to Uncontrolled Resource Consumption (Denial of Service)6.5 Medium
- google androidIn multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files...9.1 Critical
- py-pdf pypdfManipulated RunLengthDecode streams can exhaust RAM6.9 Medium
- erlang rebar3, hex, hex core +1 more +3 moreUnsafe Deserialization of Erlang Terms in hex_core2.0 Low
- snowflake jdbc, snowflakedb snowflake-jdbc +1 moresnowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos4.8 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 Medium
- py-pdf pypdfpypdf: Manipulated FlateDecode XFA streams can exhaust RAM6.6 Medium
- maximmasiutin tinywebTinyWeb has Unbounded Content-Length Memory Exhaustion (DoS)8.7 High
- maximmasiutin tinywebTinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)8.7 High
- bytecodealliance wasmtimeWasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion6.9 Medium
- imagemagickImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile6.2 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Infinite loop vulnerability when parsing a PCD file7.5 High
- imagemagick, dlemstra magick.net +1 moreImageMagick: Converting multi-layer nested MVG to SVG can cause DoS5.3 Medium
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin...7.5 High
- totolink x5000r firmwareTOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the...9.8 Critical
- moodleMoodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service6.5 Medium
- openclawOpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs4.8 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization8.7 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserialization8.7 High
- openclawOpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in web_fetch Tool6.9 Medium
- parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 morejsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions8.7 High
- bematech mp-4200Bematech Printer MP-4200 TH Denial of Service8.7 High
- splunk, splunk cloud platform, enterprise +2 moreClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise4.3 Medium
- openclawOpenClaw < 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering8.7 High
- openclawOpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive6.7 Medium
- Show moreLoading…