UBUNTU-CVE-2026-42006

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass t...

CVE-2026-42006

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass t...

PT-2026-38441

Name of the Vulnerable Software and Affected Versions ericmj decimal versions 0.1.0 through 2.x Description Uncontrolled Resource Consumption allows unauthenticated remote Denial of Service. The library does not bound the exponent on parsed input, meaning a decimal with an excessively large...

CVE-2026-42146 CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...

The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework lies in the uncontrolled distribution of memory resources, which allows a malicious actor to trigger a service failure.

The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the swap_readpage() function in the mm/page_io.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the swapreadpage function in the mm/pageio.c module of the Linux kernel’s memory management subsystem is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-13139

Memory Allocation with Excessive Size Value CWE-789 in the Prometheus remotewrite HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation CAPEC-130...

CVE-2025-14876: Allocation of Resources Without Limits or Throttling

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

The vulnerability of the “max_cert_list compression” parameter in TLS 1.3 of the OpenSSL library allows a attacker to trigger a service failure.

The vulnerability of the maxcertlist compression parameter in TLS 1.3 of the OpenSSL library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-6208: Uncontrolled Resource Consumption

The SimpleDirectoryReader component in llamaindex.core version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit numfileslimit is applied after all files in a directory are loaded into memory. Thi...

CVE-2020-7052

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition...

Uncontrolled Memory Allocation

pypdf is vulnerable to uncontrolled memory allocation. The vulnerability is due to improper handling of LZWDecode streams, which allows an attacker to craft a malicious PDF that causes excessive memory consumption up to 1 GB per stream during content parsing...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled memory distribution, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2021-21515

Malware in sbrugna...

CVE-2025-61910: Memory Allocation with Excessive Size Value

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

EUVD-2023-12444

Malicious code in bioql PyPI...

EUVD-2022-27373

Malicious code in bioql PyPI...

EUVD-2023-12443

Malicious code in bioql PyPI...

The vulnerability of Cisco IOS XE’s Wireless Network Control (wncd) operating system allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XE’s Wireless Network Control wncd operating system is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) lies in its uncontrolled memory allocation. This allows attackers to trigger service failures.

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failures...