CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- hickory-dns Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service 8.7 High
- hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop 8.7 High
- openbmb internet of agents OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop 5.3 Medium
- fluxbox Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry 6.8 Medium
- imagemagick ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder 7.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop 7.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop 7.5 High
- samsung exynos 1280, exynos 1330, exynos 1380 +16 more +18 more In the NAS Authentication Request message decoding procedure, a missing lower bound check causes... No score
- kyverno Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop 8.3 High
- moleculerjs moleculer Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser 7.5 High
- the gnu c library glibc BIG-HKSCS decoding hang on crafted input 5.9 Medium
- freerdp FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame 7.1 High
- irontec sngrep sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLV 6.8 Medium
-
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set No score - isomorphic-git isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS) 4.3 Medium
- phpmyadmin shapefile phpMyAdmin ShapeFile SHP File loadFromFile infinite loop 5.3 Medium
- freerdp FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet 7.1 High
- nexbox a95x, amlogic android sdk +1 more Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu() 6.9 Medium
- ethernut / egnite gmbh nut/net tcp/ip stack CVE-2026-120596 7.5 High
- ultra video group kvazaar Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser 6.8 Medium
- cgohlke imagecodecs imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode() 6.8 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 more Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step 7.5 High
- libredwg LibreDWG: unbounded allocation in pre-R13 DWG entity decoding 5.5 Medium
- py-pdf pypdf pypdf: Possible infinite loop when cloning dictionaries 7.1 High
- py-pdf pypdf pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search 7.1 High
- digitalbazaar forge Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) 2.9 Low
- rt-labs p-net Infinite loop when reading PDPortDataCheck record of subslot 0 8.7 High
- apache software foundation kafka Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation 9.1 Critical
- juniper networks session smart router Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection 7.5 High
- progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing 7.5 High
- progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering 7.5 High
- progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing 7.5 High
- eugeny russh russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) 4.3 Medium
- lxsmnsyc seroval Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) 7.5 High
- xpdf Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder 2.1 Low
- mtrudel bandit HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit 8.7 High
- twisted Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH 4.9 Medium
- silabs emberznet Authenticated Denial-of-Service in Zigbee Discover Attributes Handling 6.0 Medium
- haproxy, haproxy enterprise edition, kubernetes ingress controller +1 more +3 more HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ... 7.5 High
- python pillow Pillow: TarIO negative size field causes infinite CPU-spin loop 7.1 High
- cisco open source snort3, secure firewall threat defense (ftd) software, utd snort ips engine software +2 more Multiple Cisco Products Snort 3 Denial of Service Vulnerability 5.3 Medium
- cisco open source snort3, secure firewall threat defense (ftd) software, utd snort ips engine software +2 more Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities 5.8 Medium
- py-pdf pypdf pypdf: Possible infinite loop when hitting EOF in standard xref table 6.0 Medium
- py-pdf pypdf pypdf: Possible infinite loop when removing tree items 6.0 Medium
- py-pdf pypdf pypdf: Possible infinite loop in PdfWriter.find_outline_item 6.0 Medium
- eclipse foundation openj9 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() 8.7 High
- eclipse foundation threadx - guix JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode 6.8 Medium
- python pillow Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle 8.7 High
- python pillow Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() 6.3 Medium
- python pillow Pillow: Infinite loop in MIC n_frames when the embedded TIFF 8.2 High
- Show olderLoading…