CVE-2019-13288

CVE-2019-13288 – Infinite Recursion in Xpdf's Parser::getObj Overview CVE-2019-13288 is a vulnerability identified in Xpdf version 4.01.01 , specifically within the Parser::getObj function in Parser.cc. This flaw can lead to infinite recursion when processing a specially crafted PDF file, resulti...

CVE-2026-47217

The BACnet Stack , an open source protocol stack C library for embedded systems, contains a vulnerability in versions prior to 1.4.4 and 1.5.1 . A remote attacker can exploit the Channel object to trigger uncontrolled recursion and a stack overflow within the default server application. This issu...

CVE-2026-47217 BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP server

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been...

EUVD-2026-124662

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been...

CVE-2026-111792

Uncontrolled Recursion vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-106154

Progress Telerik UI for ASP.NET Core versions 2015.1.318 through 2026.3.1015 are vulnerable to uncontrolled recursion in the server-side FilterParser component. The vulnerability occurs because the parser processes nested expressions in untrusted filter parameters without a recursion-depth limit,...

CVE-2026-97845

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module Qt 6 and the Qt XML module Qt 5...

CVE-2026-97845 Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module Qt 6 and the Qt XML module Qt 5...

EUVD-2026-124396

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module Qt 6 and the Qt XML module Qt 5...

CVE-2026-97845

A vulnerability exists in the QXmlSimpleReader XML parsing functionality within the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5) . The issue is characterized as an uncontrolled recursion vulnerability (CWE-674), which can lead to a high impact on system availability. No...

CLEANSTART-2026-XJ19637 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with n...

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth...

CLEANSTART-2026-XB27469 Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (C...

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130...

PT-2026-146042

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been...

Chromium CVE-2026-121092: Uncontrolled recursion

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

Critical: Red Hat Security Advisory: cockpit-image-builder security update

An update for cockpit-image-builder is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-58505

geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable rendering and interacting with large geospatial datasets on the browser side without a server. Prior to version 6.1.1, @maplibre/geojson-vt contains an uncontrolled recursion...

CVE-2026-58505

The JavaScript library geojson-vt (specifically @maplibre/geojson-vt) contains an uncontrolled recursion vulnerability in its GeoJSON conversion logic prior to version 6.1.1 . The issue resides in the mutually recursive functions featureToInternal and convertGeometryCollection within src/convert....

CVE-2026-58505

geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable rendering and interacting with large geospatial datasets on the browser side without a server. Prior to version 6.1.1, @maplibre/geojson-vt contains an uncontrolled recursion...

EUVD-2026-123686

geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable rendering and interacting with large geospatial datasets on the browser side without a server. Prior to version 6.1.1, @maplibre/geojson-vt contains an uncontrolled recursion...