CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- spinframework containerd-shim-spin, spin, spinkube +2 moreSpin has memory leaks in various WIT interfaces6.9 Medium
- psd-toolspsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps6.8 Medium
- cisco nx-os system software in aci modeCisco NX-OS Software SNMP Denial of Service Vulnerability7.7 High
- gofiber fiberFiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation7.5 High
- bytecodealliance wasmtimeWasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion6.9 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreMemory allocation with excessive without limits in the internal SVG decoder7.5 High
- qnap qsync centralQsync Central4.9 Medium
- qnap qsync centralQsync Central4.9 Medium
- qnap qsync centralQsync Central4.9 Medium
- navidromeNavidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints9.2 Critical
- eprosima fast-dds, fast dds, debian linux +2 moreeprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled8.6 High
- eprosima fast-dds, fast dds, debian linux +2 moreeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled8.6 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- opensslTLS 1.3 CompressedCertificate excessive memory allocation5.9 Medium
- svelte kitSvelteKit has a memory amplification DoS in Remote Functions binary form deserializer8.2 High
- nasa cryptolibCryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion8.2 High
- cmu panda3dPanda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()6.9 Medium
- msgpack messagepack, msgpack-java +1 moreMessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation7.5 High
- gitlabMemory Allocation with Excessive Size Value in GitLab3.5 Low
- ibm db2IBM Db2 denial of service5.3 Medium
- nwaples rardecodeDoS via Out Of Memory Crash5.3 Medium
- nasa-jpl ion-dtnNASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Service7.5 High
- stalwartlabs stalwartUnbounded Memory Allocation in Stalwart IMAP parser7.5 High
- isc storkDoS attack against the Stork UI from an unauthenticated user7.5 High
- nvidia triton inference serverNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could...7.5 High
- gofiber fiberFiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder8.7 High
- ibm db2IBM Db2 for Linux denial of service5.3 Medium
- redisRedis through 7.4.3 allows memory consumption via a multi-bulk command composed of many bulks,...3.5 Low
- filebrowserFile Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing7.7 High
- autodesk maya, universal scene description, usd for 3ds max +1 more +3 moreUSD File Parsing Memory Allocation Vulnerability6.6 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm 4769 developers toolkitIBM 4769 Developers Toolkit denial of service7.5 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for...7.4 High
- apache activemqApache ActiveMQ: Unchecked buffer length can cause excessive memory allocation6.9 Medium
- ruby net-imap, ruby-lang net\ +1 morenet-imap rubygem vulnerable to possible DoS by memory exhaustion6.0 Medium
- surrealdbSurrealDB before 2.2.2 Memory Exhaustion via string::replace7.1 High
- helmHelm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination6.5 Medium
- erlang otpKEX init error results with excessive memory usage7.5 High
- libmingAn allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48...6.5 Medium
- erlang otpSSH SFTP packet size not verified properly in Erlang OTP7.0 High
- ruby net-imapNet::IMAP vulnerable to possible DoS by memory exhaustion6.5 Medium
- cisco broadworks network server, broadworks +1 moreCisco BroadWorks SIP Denial of Service Vulnerability7.5 High
- t2bot matrix-media-repoDenial of service through memory exhaustion in Matrix Media Repo5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- cisco ios xr softwareCisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability6.0 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability8.6 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- ibm mq, mq operator +1 moreIBM MQ denial of service5.5 Medium
- Show moreLoading…