#cwe-835

共收录 281 条相关情报。

漏洞预警2026-07-08 发布INFO

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reachi...

CVE-2026-59877

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed opt

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-07-08 发布INFO

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing...

CVE-2026-59874

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar he

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-07-08 发布INFO

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

CVE-2026-59879

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1284 #cwe-190 #cwe-400 #cwe-835

安全公告2026-07-08 发布INFO

protobufjs: Denial of Service via infinite loop in .proto option parsing

CVE-2026-59877

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed opt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835

安全公告2026-07-08 发布INFO

node-tar: Negative tar entry size causes infinite loop in archive replace

CVE-2026-59874

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar he

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the ...

CVE-2026-55595

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-835

漏洞预警2026-07-01 发布INFO

FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enabling extremely long ...

CVE-2026-6684

FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived f

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-07-01 发布INFO

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery o...

CVE-2026-14258

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Ad

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-06-26 发布INFO

Hackney has an infinite loop on non-token byte at start of an Alt-Svc entry

CVE-2026-47066

### Summary [CVE-2026-47066](https://nvd.nist.gov/vuln/detail/CVE-2026-47066) is an infinite loop (CWE-835) in hackney'

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #erlang #cwe-835 #severity:high

安全公告2026-06-25 发布INFO

ImageMagick has an Infinite Loop in subimage-search with crafted image

CVE-2026-48733

An infinite loop in the subimage-search operation can happen when using a crafted image.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-835 #severity:medium

漏洞预警2026-06-24 发布INFO

The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl011_irq_tx_enable() that repeatedly invokes the interrupt-driven application ...

CVE-2026-10642

The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl011_irq_tx_enable()

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-24 发布INFO

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float:...

CVE-2026-54904

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a p

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-22 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires ...

CVE-2026-54651

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-22 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires ...

CVE-2026-54531

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-22 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires ...

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-18 发布INFO

pam_usb provides hardware authentication for Linux using removable media. In pam_usb 0.9.1 and earlier, usb_get_process_parent_id() can cause an infinite loop DoS because it doe...

CVE-2026-48986

pam_usb provides hardware authentication for Linux using removable media. In pam_usb 0.9.1 and earlier, usb_get_process_

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-06-17 发布INFO

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service...

CVE-2026-55199

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SS

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-835 #severity:high

漏洞预警2026-06-17 发布INFO

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a mali...

CVE-2026-55199

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SS

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search ...

CVE-2026-48733

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF ...

CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-131 #cwe-252 #cwe-787 #cwe-835