CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- imgproxy imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader 8.7 High
- sveltejs devalue Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse 8.7 High
- signalwire freeswitch FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length 7.5 High
-
python-laspyDebian laspy LAS File lasreader.py memory allocation 5.3 Medium - cesnet ipfixcol2 CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder 6.9 Medium
- apache software foundation activemq nms openwire client library Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS) No score
- isomorphic-git isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS) 4.3 Medium
- apache software foundation wicket Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names 8.3 High
- agamnentzar ag-psd ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS) 7.5 High
- libredwg LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing 5.5 Medium
-
starletDebian Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory 7.5 High - mariadb-corporation mariadb-connector-j MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths 3.7 Low
- mariadb-corporation mariadb-connector-j MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication 5.9 Medium
- mariadb-corporation mariadb-connector-j MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets 5.9 Medium
- nipy nibabel nipy nibabel Header volumeutils.py array_from_file memory allocation 6.9 Medium
- nschloe meshio nschloe meshio VTK Reader _vtk_42.py memory allocation 6.9 Medium
- dalibo postgresql anonymizer PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() 4.7 Medium
- dalibo postgresql anonymizer PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions 4.7 Medium
- apache software foundation kafka Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches 6.5 Medium
- apache software foundation kafka Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation 7.5 High
- apache software foundation kafka Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers 9.1 Critical
- progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering 7.5 High
- fasterxml jackson-dataformat-smile jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service 7.5 High
- onnx ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs 6.2 Medium
- zip-rs zip2 zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size 7.5 High
- mattermost, mattermost server +1 more Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames 6.5 Medium
- smg-project smg smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation 6.9 Medium
-
libplack-perlDebian,perl-PlackopenSUSE +1 more HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length 7.5 High -
libweb-simple-perlDebian Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters 7.5 High - aws aws-c-mqtt Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt 8.2 High
- nationalsecurityagency ghidra Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation 6.8 Medium
- phpoffice phpspreadsheet PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS) 8.7 High
- zip-rs zip2 zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction 7.5 High
- apache software foundation brpc Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser 7.5 High
- nationalsecurityagency ghidra Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts 6.8 Medium
- rgrove crass Crass: Large numeric exponents cause CPU and memory denial of service 8.9 High
- python pillow Pillow: APNG background disposal allocates full canvas before decompression bomb check 8.7 High
- libbluray libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points 6.8 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser 6.5 Medium
- spatialite libspatialite libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count 6.9 Medium
- dragonflydb dragonfly Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER 8.7 High
- eclipse vert.x In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... 8.2 High
- eclipse vert.x In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... 8.2 High
- eclipse vert.x In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... 8.2 High
- eclipse vert.x In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... 8.2 High
- ow2 asm OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions 6.8 Medium
- ow2 asm OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute 6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 more Active Directory Federation Services (AD FS) Denial of Service Vulnerability 7.5 High
- grafana enterprise, oss +1 more Unbounded memory allocation in the Prometheus rule conversion API 6.5 Medium
- beautifier js-beautify beautifier js-beautify memory allocation 6.9 Medium
- Show olderLoading…