CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- gotd tdtd has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode7.5 High
- erlang erts, otp, erlang\/otp +2 moreBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding8.2 High
- ollamaOllama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser8.7 High
- greyclab cimgCImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header7.5 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via oversized sftp read length6.5 Medium
- h2oh2o is vulnerable to musl libc stack overflow7.5 High
- envoyproxy gatewayEnvoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header6.5 Medium
- envoyproxy gatewayEnvoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit6.5 Medium
- anthropics buffaBuffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation6.3 Medium
- huawei emui, harmony os +1 moreDoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability...6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability7.5 High
- python pillowPillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service8.7 High
- h2oh2o: musl libc stack overflow (QPACK)7.5 High
- m2team nanazipNanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields2.4 Low
- m2team nanazipNanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields2.4 Low
- apache software foundation iotdbApache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver7.5 High
adm-zipnpm,@rootio/adm-zipRoot +1 moreadm-zip: Crafted ZIP file triggers 4GB memory allocation7.5 High- py-pdf pypdfpypdf: Possible large memory usage for wrong image dimensions6.9 Medium
- tanium serverTanium addressed a denial of service vulnerability in Tanium Server.7.5 High
- tonyc imagerImager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed9.8 Critical
- coderCoder's unbounded memory allocation in provisioner file upload allows authenticated denial of service4.9 Medium
- python pillowPillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading7.5 High
- python pillowPillow GdImageFile decompression bomb protection bypass7.5 High
- python pillowPillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`7.5 High
- python pillowPillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading7.5 High
- swooshEmail-derived URL path injection in the Swoosh Microsoft Graph adapter2.1 Low
hdrhistogramDebian,netavarkRed Hat,netavark-testsRed Hat +2 moreHdrHistogram AbstractHistogram.java memory allocation4.8 MediumhdrhistogramDebian,netavarkRed Hat,netavark-testsRed Hat +1 more +3 moreHdrHistogram AbstractHistogram.java memory allocation4.8 Medium- o6 automation gmbh open62541GetEndpoints Memory Exhaustion in open625417.5 High
- o6 automation gmbh open62541FindServers Memory Exhaustion in open625417.5 High
- apache activemq, apache software foundation activemq all, activemq client +2 moreApache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation7.5 High
- apache activemq, apache software foundation activemq all, activemq stomp +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec7.5 High
- apache activemq, activemq broker, apache software foundation activemq all +1 more +3 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling7.5 High
- leandrocp mdex, mdex native +1 moreUnbounded memory allocation in highlight_lines range expansion in mdex6.9 Medium
- aquasec trivyTrivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser6.9 Medium
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows8.2 High
- connectbot cbsshConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing6.7 Medium
- connectbot cbsshConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation6.9 Medium
- open-telemetry opentelemetry-cpp, opentelemetry +1 moreopentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response5.3 Medium
- dana powers kafka-pythonkafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length8.7 High
- ghidraGhidra < 12.1.1 - Denial of Service via Uncontrolled Memory Allocation in Mach-O Parser6.7 Medium
- nationalsecurityagency ghidraGhidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol6.7 Medium
- jelmer dulwichDulwich has unbounded memory allocation in receive-pack from crafted thin packs5.7 Medium
- samsung open source rlottieMemory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows...6.1 Medium
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of service7.5 High
- opentelemetry, open-telemetry go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel/propagation +2 moreOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Medium
- bingos archive::tar, archive\ \ +1 moreArchive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header7.5 High
- stokedonit notebook proNotebook Pro 2.0 Denial of Service via Notebook Name Field6.9 Medium
- nordvpnNord VPN 6.14.31 Denial of Service via Password Field8.7 High
- mattermost, mattermost server +1 moreUnauthenticated WebSocket binary frame causes denial of service in Mattermost Server7.5 High
- Show moreLoading…