CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- imagemagickImageMagick: Denial of service with crafted XMP profile5.3 Medium
- imagemagickImageMagick: Policy Bypass in CUT encoder4.0 Medium
- imagemagickImageMagick: Denial of service possible when parsing an XMP profile.5.3 Medium
- imagemagickImageMagick: Denial of service in MVG decoder5.3 Medium
- imagemagickImageMagick: Denial of service in distributed pixel cache server4.3 Medium
- imagemagickImageMagick: Infinite Loop in bzip2 compressed images.5.9 Medium
- wolfsshwolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion6.9 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities4.3 Medium
- giteaGitea migration memory exhaustion from zero page size6.5 Medium
- mozilla node-convictCVE-2026-1065507.5 High
- elastic elasticsearchUncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service6.5 Medium
- giteaGitea Actions memory exhaustion through large static matrices7.5 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager6.1 Medium
- payloadcms payloadPayload: ReDoS in Multipart Content-Type Validation8.7 High
- vllmvLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion5.3 Medium
- vllmvLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)5.9 Medium
- hickory-dnsHickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records6.9 Medium
- docling, docling-project docling-slim +1 moreDocling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion6.5 Medium
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode7.5 High
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating7.5 High
- nodeca probe-image-sizeprobe-image-size: Quadratic-time Denial of Service in the SVG Parser7.5 High
- postcss postcss-selector-parserPostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion5.9 Medium
- apache software foundation directory ldap apiApache Directory LDAP API: Denial of service via crafted telephone number values7.5 High
- daanvandenbergh omgf | gdpr/dsgvo compliant, faster google fonts. easy.OMGF < 6.3.11 - Unauthenticated DoS via do_optimize7.5 High
- red hat build of openjdk 11 els, enterprise linux 10, enterprise linux 6 +4 more +6 moreFreetype: freetype: denial of service via repeated subroutine allocations in cid font loader5.5 Medium
- kvcache-ai mooncakeMooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write8.2 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue7.5 High
- google androidIn qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource...7.8 High
- tornadoweb tornadoTornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient8.7 High
- py-pdf pypdfpypdf: Possible large memory usage when retrieving alphabetical page labels8.7 High
- py-pdf pypdfpypdf: Possible long runtimes with large amount of embedded files8.7 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Uncontrolled Resource Consumption5.3 Medium
- py-pdf pypdfpypdf: Possible long runtimes when generating appearance streams8.7 High
- py-pdf pypdfpypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)8.7 High
- py-pdf pypdfpypdf: Possible large memory usage when parsing font data8.7 High
- py-pdf pypdfpypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)8.7 High
- py-pdf pypdfpypdf: Possible long runtimes/large memory usage when parsing indirect objects8.7 High
- py-pdf pypdfpypdf: Possible large memory usage when retrieving Roman page labels8.7 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a...5.5 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a...5.5 Medium
- @angular router, angular +1 moreAngular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)8.2 High
- cthackers adm-zipadm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Resource Exhaustion in Login Process Allows Denial of Service8.7 High
- watchguard fireware, fireware os +1 moreFireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B7.1 High
- watchguard fireware, fireware os +1 moreFireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service7.1 High
- hewlett packard enterprise (hpe) instant onAuthenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint4.9 Medium
- eugeny russhRussh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey6.5 Medium
- wikimedia foundation mediawiki - datatransfer extensionDataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)7.5 High
- browserify pbkdf2pbkdf2 rehashes long passwords on every iteration, enabling denial of service6.3 Medium
- @angular platform-server, angular +1 moreAngular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE8.7 High
- Show moreLoading…