16348 matches found
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted Document Type Definition DTD content. This could lead to an infinite loop during parsing, resulting in a Denial of Service DoS for the application using libexpat...
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop in the DTD parsing process. An attacker can cause the application to enter an infinite loop by providing specially crafted DTD content. Remediation Upgrade expat to version 2.7.5 or higher. References - GitHub Commit -...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
CVE-2026-32777 affects libexpat prior to 2.7.5, where parsing DTD content can trigger an infinite loop. This behavior can cause a denial of service if a system processes crafted DTDs. The available connected documents confirm the issue and its relation to libexpat’s DTD parsing loop, with no expl...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
PT-2026-26174
Summary ewe's handle trailers function contains a bug where rejected trailer headers forbidden or undeclared cause an infinite loop. The function recurses with the original unparsed buffer instead of advancing past the rejected header, re-parsing the same header forever. Each malicious request...
CVE-2026-32777: Loop with Unreachable Exit Condition
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
Linux kernel Alienware WMI DoS
The vulnerability of the function alienwarewmaxwmiinit in the module drivers/platform/x86/dell/alienware-wmi-wmax.c of the Linux kernel is related to an infinite loop. Exploiting this vulnerability can allow a attacker to cause a service failure...
OESA-2026-1583 zlib security update
Security Fixes: zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVE-2026-27171...
OESA-2026-1585 zlib security update
Security Fixes: zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVE-2026-27171...
PT-2026-30146
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the bond header parse function. This function could enter an infinite loop when processing a stack of two bonding devices because skb-dev always...
CVE-2026-4179
CVE-2026-4179 affects the STM32 USB device driver, specifically the USB interrupt handling path in drivers/usb/device/usb_dc_stm32.c. The issue is an infinite loop (infinite while loop) in the USB interrupt handler, as described across multiple sources (Red Hat, NVD, CVE listing, CVE enrichment)....