CVE-2026-96596

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

EEF-CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Summary Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafte...

CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

EUVD-2026-101370

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic...

CVE-2026-102046 Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic...

CVE-2026-102046

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists in the netsctp.ko component of Juniper Networks Junos OS on MX Series devices. An unauthenticated network attacker can exploit this flaw by sending crafted SCTP network traffic , leading to a denial of service on the Ro...

CVE-2016-20099

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2016-20099

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2026-101895 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

EUVD-2026-101126

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

CVE-2026-101895

The @angular/platform-server DOM emulation parser is vulnerable to an infinite synchronous loop when processing attacker-controlled HTML containing an incomplete DOCTYPE ending with whitespace. This occurs in Domino lib/HTMLParser.js because the after_doctype_name_state emits tokens without advan...

CVE-2026-101895 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

EUVD-2016-10915

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2016-20099

The L-SMASH software (versions through 2.14.5 ) is vulnerable to an infinite loop within the vc1_importer_probe() function located in importer/vc1_imp.c. This vulnerability occurs because lsmash_read_file() automatically probes input files; providing a file consisting solely of zero bytes trigger...

CVE-2016-20099 L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

curl: curl: never-ending loop via server response omission

A flaw was found in curl. When communicating with a malicious server using protocols such as FTP, IMAP, POP3, or SMTP, the server can trigger an infinite loop by continuously transmitting data while omitting the final control response line. This behavior bypasses configured transfer timeouts,...

PT-2026-114150

FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http response recv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...

CVE-2026-110836: Loop with Unreachable Exit Condition

FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in httpresponserecv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...