CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation storm workerApache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder9.8 Critical
- apache opennlpApache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer7.5 High
- the gnu c library glibcStack overflow in nscd due to unbounded alloca use4.2 Medium
- rclonerclone: S3 multipart declared-length memory exhaustion7.5 High
- google cel-go, common expression language +1 moreUncontrolled Memory Allocation in cel-go6.9 Medium
- keepassKeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size4.6 Medium
- eclipse foundation ankaiosIn Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by...6.8 Medium
- mit moos-ivpMOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count8.7 High
- themoos core-moosMOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation8.7 High
- rightnow-ai openfangRightNow-AI OpenFang tool_runner.rs shell_exec memory allocation5.3 Medium
- sigoden aichatsigoden aichat API Endpoint serve.rs memory allocation6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation5.3 Medium
- eclipse foundation jettyA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via QR total field8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via STREAMINFO8.7 High
- getkin kin-openapikin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding8.7 High
- vouch vouch-proxyVouch Proxy: Unbounded Multipart Cookie Allocation DoS7.5 High
- wazuhWazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulation4.9 Medium
- amazon ion javaMemory-amplification denial of service via declared-length preallocation in Amazon ion-java8.7 High
- rabbitmq rabbitmq-java-clientRabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation8.7 High
- golang.org/x/image golang.org/x/image/vp8lExcessive memory allocation during VP8L decoding in golang.org/x/image7.5 High
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service6.5 Medium
- rrwo net::cidr::setNet::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths7.5 High
- rapid7 velociraptorVelociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes6.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreIperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion5.3 Medium
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7 +7 more +9 moreWildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener7.5 High
- gnu cpioUncontrolled Memory Allocation in GNU cpio4.6 Medium
- apache software foundation iotdbApache IoTDB: RPC service denial of service via unchecked Thrift string length7.5 High
- eukaryot sonic3airSonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache8.7 High
- @clerk nuxtNuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering7.5 High
- theotherphil imagecliimagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service7.5 High
- apache qpid protonj2Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication7.5 High
- apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 moreApache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication7.5 High
- apache qpid proton-jApache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication7.5 High
- aizuda snailjob (snail-job)SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM7.1 High
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust...8.7 High
- djangoproject djangoPotential denial-of-service vulnerability in check_for_language()6.9 Medium
- cthackers adm-zipadm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)7.5 High
- bouncycastle bc-javaMLS wire decoder allocates attacker-declared opaque length before bounds check8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 morePossible OOM from unbounded up-front allocation on a definite-length read8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreHSS public-key level count unbounded, enabling huge allocation on verify8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreDTLS handshake reassembler allocates buffer from unchecked 24-bit length8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP user-attribute subpacket length bounded only by JVM max memory8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS/UBER keystore allocates from untrusted lengths before integrity check7.1 High
- pterodactyl wingsWings: Maliciously or erroneously created parsed config files can cause wings process to OOM5.5 Medium
- allinurl goaccessGoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service8.7 High
- Show moreLoading…