CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- eclipse threadx usbx, eclipse foundation threadx - usbx +1 moreThe function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi…4.2 Medium
- openjsf eslintWithdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references5.5 Medium
- avahiAvahi has Uncontrolled Recursion in lookup_handle_cname function6.5 Medium
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python Protobuf8.2 High
- oisf suricataSuricata http1: infinite recursion in decompression7.5 High
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflow3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing5.9 Medium
- color iccdevStack Overflow in iccDEV XML Calculator Macro Expansion5.5 Medium
- imagemagickMagick's failure to limit MVG mutual references forming a loop4.0 Medium
- imagemagickMagick's failure to limit the depth of SVG file reads caused a DoS attack.5.3 Medium
- uriparseruriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by...2.9 Low
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 moreNodemailer: nodemailer: denial of service via crafted email address header7.5 High
- apache brpcApache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser7.5 High
- digitalbazaar forgenode-forge ASN.1 Unbounded Recursion8.7 High
- amazon opensearchOpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS8.3 High
- ibm concertIBM Concert Information Disclosure5.1 Medium
- linux, linux kernel +1 moreksmbd: fix recursive locking in RPC handle list access7.5 High
- xpdfStack overflow in Xpdf 4.05 due to object loop in PDF CMap2.1 Low
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM vulnerability8.7 High
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next denial of service6.5 Medium
- weirdgloop mediawiki-extensions-bucketBucket vulnerable to infinite recursion when querying a bucket using the != operator6.5 Medium
- qtUncontrolled recursion in Qt SVG module9.4 Critical
- freedesktop popplerPoppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply...2.9 Low
- linux, linux kernel +1 morepowercap: arm_scmi: Remove recursion while parsing zones5.5 Medium
- linux, linux kernel +1 morecrypto: hisilicon/qm - increase the memory of local variables5.5 Medium
- express xss sanitizer project xss sanitizerexpress-xss-sanitizer has an unbounded recursion depth5.3 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 moreblock: avoid possible overflow for chunk_sectors check in blk_stack_limits()5.5 Medium
- linux, linux kernel +1 moreLoongArch: KVM: Fix stack protector issue in send_ipi_data()8.8 High
- gnome libxml2, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreStack overflow in libxml26.2 Medium
- mlc-ai xgrammarXGrammar affected by Denial of Service by infinite recursion grammars7.7 High
- run-llama run-llama/llama indexDenial of Service (DOS) in JSONReader in run-llama/llama_index8.6 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 moreeventpoll: Fix semi-unbounded recursion7.8 High
- No product listedUncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1...5.4 Medium
- No product listedUncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1...4.1 Medium
- gnome libxml2, ibm aix, vios +2 more +4 morelibxml2 xmlcatalog xmlParseSGMLCatalog recursion4.8 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker...7.5 High
- freedesktop popplerAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...6.5 Medium
- artifex mupdfAn issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service...6.5 Medium
- linux, linux kernel +1 moretracing/osnoise: Fix crash in timerlat_dump_stack()5.5 Medium
- debian linux, linux kernel +1 moreatm: clip: Fix infinite recursive call of clip_push().7.8 High
- apache commons langApache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs5.3 Medium
- connect2id nimbus jose+jwtNimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON5.8 Medium
- linux, linux kernel +1 moreBluetooth: btintel: Check dsbr size from EFI variable5.5 Medium
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB7.5 High
- linux, linux kernel +1 morepowerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable5.5 Medium
- google protobuf-python, protocolbuffers python-protobuf +1 moreUnbounded recursion in Python Protobuf8.2 High
- mediatek lr12a, lr13, nr15 +4 more +6 moreIn ims service, there is a possible system crash due to incorrect error handling. This could lead...6.5 Medium
- powerdns dnsdistDenial of service via crafted TCP exchange7.5 High
- Show moreLoading…