CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- pupnppupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow6.5 Medium
- getkin kin-openapikin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash7.5 High
- sensiolabs symfonySymfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process8.7 High
- sensiolabs symfonySymfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process8.7 High
- No product listedAn issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a...7.5 High
libjackson-json-javaUbuntuFasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and...7.5 High- ow2 asmOW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader6.8 Medium
- ow2 asmOW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()6.8 Medium
- bytecodealliance wasmtimeWasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry6.9 Medium
- curlcurl_mime_free stack overflow by recursion7.5 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +11 more +13 more.NET Denial of Service Vulnerability7.5 High
- ibm maximo ai serviceMaximo AI Service Denial of Service7.5 High
- ibm maximo application suite - iot componentIBM Maximo Application Suite - IoT Component Denial of Service7.5 High
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder6.9 Medium
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder6.3 Medium
- elixir-protobuf protobufUncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages8.2 High
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access5.9 Medium
- corazawaf corazaOWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion5.9 Medium
- webonyx graphql-phpwebonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input8.2 High
- corazawaf corazaOWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)7.5 High
- mcollina msgpack5msgpack5: Many buffered values can exhaust the streaming decoder stack7.5 High
- mcollina msgpack5msgpack5: Deeply nested input can exhaust the decoder stack5.3 Medium
- ffmpegFFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes5.7 Medium
- offis dcmtkUncontrolled recursion in DCMTK JSON reader allows denial of service6.8 Medium
- offis dcmtkUncontrolled recursion in DCMTK xml2dcm allows denial of service6.8 Medium
- offis dcmtkUncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service6.8 Medium
- offis dcmtkUncontrolled recursion in the DCMTK bundled XML parser allows denial of service6.8 Medium
- offis dcmtkUncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service8.7 High
- excelizeExcelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow7.5 High
- imagemagickImageMagick: Denial of service with crafted XMP profile5.3 Medium
- imagemagickImageMagick: Stack Overflown CALS decoder due to missing depth check.5.3 Medium
- yawkat lz4-javayawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError3.7 Low
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
fast-copynpmfast-copy: Stack exhaustion in fast-copy when copying deeply-nested values6.3 Medium- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)8.7 High
- apache software foundation thriftApache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)8.7 High
- apache software foundation thriftApache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard8.2 High
- apache software foundation thriftApache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)8.2 High
- apache software foundation thriftApache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)8.2 High
- apache software foundation thriftApache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)8.7 High
- bouncycastle bc-csharpUnbounded ASN.1 nesting depth causes process-terminating stack overflow8.7 High
- amazon ion-pythonUncontrolled recursion in the Ion reader in Amazon Ion Python8.7 High
graphicsmagickDebianGraphicsMagick WPG File wpg.c ExtractPostscript recursion5.3 Medium- apache software foundation plc4xApache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths8.7 High
- apache software foundation plc4xApache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser8.7 High
- gosub-io gosub-engineUncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before...7.1 High
- apache xmlschemaApache XMLSchema: Denial of service through cyclic schema definitions in the schema walker7.5 High
- apache xmlschemaApache XMLSchema: Denial of service through deeply nested schema structures7.5 High
- Show moreLoading…