CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- progress moveit automationUncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation5.9 Medium
- samsung escargotMemory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows...5.5 Medium
github.com/hamba/avro/v2Go,github.com/iskorotkov/avro/v2Go +1 moreiskorotkov/avro: Denial-of-Service Vulnerability in Decoder8.7 High- mattermost, mattermost server +1 moreMemory Exhaustion via Malicious 7zip File Upload4.3 Medium
- sticky-notes sticky notes widgetSticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow8.7 High
- sticky-notes-color-widgets sticky notes color widgetsSticky Notes & Color Widgets 1.4.2 Denial of Service8.7 High
- my-notes-safe my notes safeMy Notes Safe 5.3 Denial of Service via Buffer Overflow8.7 High
- macaron notes notesMacaron Notes 5.5 Denial of Service via Buffer Overflow8.7 High
- color-notes color notesColor Notes 1.4 Denial of Service via Long Character String8.7 High
- f5 dos, nginx open source, nginx plus +4 more +6 moreNGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability8.3 High
- memono notepadmemono Notepad 4.2 Denial of Service via Buffer Overflow8.7 High
rust-zseriocrates.iorust-zserio has Unbounded Memory Allocation7.5 High- netty, io.netty netty-codec-http3 +1 moreNetty: HTTP/3 QPACK literal unbounded allocation7.5 High
- aarnott nerdbank.messagepackNerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException7.5 High
- opentelemetry opentelemetry.opamp.client, open-telemetry opentelemetry-dotnet-contrib +1 moreOpAMP client reads unbounded HTTP response bodies5.9 Medium
- apache thrift, red hat ai inference server, build of apache camel 3.33 for quarkus 3.33.2.sp1 +7 more +9 moreApache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern5.3 Medium
- greyclab cimgCImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp5.5 Medium
- apache opennlp, red hat data grid 8, fuse 7 +2 more +4 moreApache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader7.5 High
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 High
- p10 observerip scan toolObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field6.9 Medium
- convertimagetotext jina ocr image to textjiNa OCR Image to Text 1.0 Denial of Service via PNG6.9 Medium
- infrarecorderInfraRecorder 0.53 Denial of Service via txt File Import6.9 Medium
- g-research parquetsharpParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width5.3 Medium
github.com/woven-planet/go-zserioGogo-zserio has Unbounded Memory Allocation for All Platforms9.8 Critical- nds-association zserioZserio: Integer Overflow in BitStreamReader and Unbounded Memory Allocation in Deserialization7.5 High
- eugeny russh, warpgate project warpgate +1 moreRussh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth7.5 High
- open-telemetry opentelemetry.api, opentelemetry.extensions.propagators, opentelemetry +1 more +3 moreOpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers5.3 Medium
- opentelemetry, open-telemetry opentelemetry-dotnet, opentelemetry.exporter.opentelemetryprotocol +2 moreOpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling5.3 Medium
- opentelemetry, open-telemetry opentelemetry-dotnet +1 moreOpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies5.3 Medium
- py-pdf pypdfpypdf: Manipulated FlateDecode image dimensions can exhaust RAM4.8 Medium
- py-pdf pypdfpypdf: Manipulated FlateDecode predictor parameters can exhaust RAM4.8 Medium
- netfoundry zrokzrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing7.5 High
- bytecodealliance wasmtimeWasmtime has an improperly masked return value from `table.grow` with Winch compiler backend6.1 Medium
- bytecodealliance wasmtimeWasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-644.1 Medium
- open-telemetry opentelemetry-go, opentelemetry +1 moreOpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies5.3 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a...7.5 High
- softether softethervpnPre-Auth EAP-TLS DoS on SoftEther VPN Developer Edition7.5 High
- mariadbAn issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...6.5 Medium
- powerdns dnsdistUnbounded memory allocation for DoQ and DoH35.3 Medium
- openclawOpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses6.9 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker...7.5 High
- rubyonrails rails, rails activestorage +1 moreRails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests6.6 Medium
- elastic metricbeatMemory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service5.7 Medium
- mackron dr libs, dr libs dr flac.h +1 moremackron / dr_libs dr_flac.h Excessive Memory Allocation in PICTURE Metadata Parsing6.9 Medium
- bishopfox sliverSliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports5.7 Medium
- mattermost, mattermost server +1 moreMemory Exhaustion via Malformed DOC File Upload4.3 Medium
- mattermost, mattermost server +1 moreMemory Exhaustion via Malformed PSD File Upload4.3 Medium
- mattermost, mattermost server +1 moreDenial of Service via Unbounded Memory Allocation in Integration Actions5.3 Medium
- freerdpFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Low
- trane tracer concierge, tracer sc, tracer sc+ +2 more +4 moreMemory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge8.7 High
- Show moreLoading…