#cwe-835

共收录 281 条相关情报。

← 返回所有主题

漏洞预警2026-11-01 发布MEDIUM

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a craf...

CVE-2026-120251

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #severity:medium

漏洞预警2026-10-31 发布HIGH

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An applicati...

CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when gi

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #severity:high

安全公告2026-10-30 发布HIGH

pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

CVE-2026-119203

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires openi

来源摘录 · GitHub Advisory

#advisory #cwe-835 #pip #severity:high

安全公告2026-10-30 发布HIGH

pypdf has possible infinite loop when cloning dictionaries

CVE-2026-119205

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloni

来源摘录 · GitHub Advisory

#advisory #cwe-835 #pip #severity:high

安全公告2026-10-30 发布LOW

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

CVE-2026-118781

### Summary `BigInteger.prototype.modInverse()` in node-forge's bundled jsbn library enters an infinite loop when the v

来源摘录 · GitHub Advisory

#advisory #cwe-835 #npm #severity:low

安全公告2026-10-30 发布MEDIUM

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

CVE-2026-116774

## Summary A peer can advertise `maximum packet size = 0` in its channel-open message (`CHANNEL_OPEN` when attacking a

来源摘录 · GitHub Advisory

#advisory #cwe-400 #cwe-835 #rust #severity:medium

漏洞预警2026-10-30 发布MEDIUM

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_preR13_entities()` in `src/decode.c` enter a nonterminating ...

CVE-2026-62250

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_pre

来源摘录 · NVD

#cve #cwe-400 #cwe-835

漏洞预警2026-10-29 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone t...

CVE-2026-119205

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #pip #severity:high

漏洞预警2026-10-29 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference ...

CVE-2026-119203

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #pip #severity:high

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInv...

CVE-2026-118781

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #npm #severity:low

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to t...

CVE-2026-111731

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (w

来源摘录 · NVD

#cve #cwe-835

安全公告2026-10-28 发布INFO

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

CVE-2026-116581

### Summary `fromJSON` and `fromCrossJSON` used two node fields without checking them. - An array node's element list

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1284 #cwe-835 #npm #severity:high

漏洞预警2026-10-28 发布INFO

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuation time as timestamp + (intervalsMissed + 1) * interval...

CVE-2026-111496

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctua

来源摘录 · NVD

#cve #cwe-190 #cwe-835

漏洞预警2026-10-28 发布HIGH

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service ...

CVE-2026-103410

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unau

来源摘录 · NVD

#cve #cwe-190 #cwe-835

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular express...

CVE-2026-118037

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333 #cwe-606 #cwe-674 #cwe-835

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocati...

CVE-2026-118036

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-674 #cwe-770 #cwe-789 #cwe-835

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in...

CVE-2026-118035

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient al

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-674 #cwe-835

漏洞预警2026-10-27 发布MEDIUM

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximum_...

CVE-2026-116774

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65

来源摘录 · NVD

#cve #cwe-400 #cwe-835

漏洞预警2026-10-27 发布INFO

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a...

CVE-2026-109088

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-10-27 发布INFO

libXtst RECORD EnableContext Reply Endless Loop

CVE-2026-109088

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835