Falhas do tipo CWE-834

34 resultados
CVE-2024-8049MEDIUMTelerik Document Processing Improper Handling of Memory ResourcesEPSS 0.4%CVE-2025-56571HIGHFinance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursioEPSS 0.4%CVE-2022-3616MEDIUMOctoRPKI crash when maximum iterations number is reachedEPSS 0.4%CVE-2025-62707MEDIUMpypdf affected by possible infinite loop when reading DCT inline images without EOF markerEPSS 0.4%CVE-2025-67726HIGHTornado is Vulnerable to Quadratic DoS via Crafted Multipart ParametersEPSS 0.4%CVE-2026-40347MEDIUMPython-Multipart affected by Denial of Service via large multipart preamble or epilogue dataEPSS 0.4%CVE-2026-45680MEDIUMOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPUEPSS 0.3%CVE-2025-6714HIGHIncorrect Handling of incomplete data may prevent mongoS from Accepting New ConnectionsEPSS 0.3%CVE-2026-41168MEDIUMpypdf has possible long runtimes for wrong size values in cross-reference and object streamsEPSS 0.3%CVE-2026-50171HIGHAngular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)EPSS 0.3%CVE-2025-55181MEDIUMSending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blEPSS 0.3%CVE-2026-41313MEDIUMpypdf: Possible long runtimes for wrong size values in incremental modeEPSS 0.2%CVE-2026-27025MEDIUMpypdf has possible long runtimes/large memory usage for large /ToUnicode streamsEPSS 0.2%CVE-2026-48156MEDIUMpypdf: Possible long runtimes for zero-only width values in cross-reference streamsEPSS 0.1%