CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service in run-llama/llama_index7.5 High
- debian linux, linux kernel +1 morefbdev: omapfb: Add 'plane' value check5.5 Medium
- linux, linux kernel +1 moreperf: Improve missing SIGTRAP checking5.5 Medium
- visicutVisiCut 2.1 allows stack consumption via an XML document with nested set elements, as...3.3 Low
- surrealdbSurrealDB before 2.2.2 Memory Exhaustion via Nested Functions6.0 Medium
- helmHelm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow6.5 Medium
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service in run-llama/llama_index4.2 Medium
- square wireWire has Uncontrolled Recursion on Nested Groups5.8 Medium
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpat7.5 High
- datalust seqAn issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth...5.7 Medium
- wiresharkUncontrolled Recursion in Wireshark7.8 High
- denx u-bootA stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted...2.0 Low
json-smartDebian,io.root.net.minidev:json-smartRoot,jenkinsRed Hat +2 more +4 moreNetplex Json-smart Uncontrolled Recursion vulnerability7.5 High- coherent graphics cpdfcpdf through 2.8 allows stack consumption via a crafted PDF document.4.0 Medium
- misskey-dev misskeyUncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey7.4 High
cosmossdk.io/x/txGo,github.com/cosmos/cosmos-sdkGo +1 moreASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion8.7 High- python protobufCrash due to uncontrolled recursion in protobuf crate5.9 Medium
- contiki-ngUncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG8.7 High
smol-tomlnpmsmol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables5.3 Medium- linux, linux kernel +1 moreafs: Fix lock recursion7.5 High
- grame faustIn Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L:...7.5 High
- vercel next.jsNext.js image optimization has Denial of Service condition5.9 Medium
- redisDenial-of-service due to unbounded pattern matching in Redis5.5 Medium
- linux, linux kernel +1 morercu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed5.5 Medium
- linux, linux kernel +1 morenbd: fix incomplete validation of ioctl arg5.5 Medium
- google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 moreStack overflow in Protocol Buffers Java Lite8.7 High
- linux, linux kernel +1 morebpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener5.5 Medium
- go standard library go/build/constraint, go build constraint standard library +1 moreStack exhaustion in Parse in go/build/constraint7.5 High
- linux, linux kernel +1 morevsock: fix recursive ->recvmsg calls5.5 Medium
- apollographql apollo gateway, apollo router, federation +3 more +5 moreApollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries7.5 High
- matrix-org matrix-js-sdk, matrix javascript sdk +1 moreA room with itself as a its predecessor will freeze matrix-js-sdk4.1 Medium
- rust-bitcoin miniscriptMiniscript allows stack consumption7.5 High
- xpdfStack overflow in Xpdf 4.05 due to object loop in PDF pattern2.1 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.8 High
- red hat build of apache camel - hawtio 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.1 for spring boot 3.2 +17 more +19 moreUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 High
- rhaiRhai stack overflow vulenrability7.5 High
- langchain, langchain-ai langchain-ai/langchain +1 moreDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchain4.2 Medium
- linux, linux kernel +1 moreKVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()7.1 High
- linux, linux kernel +1 moreriscv: VMAP_STACK overflow detection thread-safe7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv6: Fix infinite recursion in fib6_dump_done().7.8 High
- hdfgroup hdf5HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.7.5 High
- glyphandcog xpdfStack overflow in Xpdf 4.05 due to object loop in PDF resources2.9 Low
sqlparseRootDuplicate Advisory: sqlparse parsing heavily nested list leads to Denial of Service7.5 High- sqlparse project sqlparsePassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 High
- xpdfStack overflow in Xpdf 4.05 due to object loop in attachments2.9 Low
- xpdfStack overflow in Xpdf 4.05 due to object loop in PDF object stream2.9 Low
- linuxserver heimdall application dashboardLinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such...9.8 Critical
- codeigniter, codeigniter4 +1 moreCodeIgniter4 Language class DoS Vulnerability7.5 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and...8.6 High
- katexKaTeX's maxExpand bypassed by Unicode sub/superscripts6.5 Medium
- Show moreLoading…