150 matches found
CLEANSTART-2025-OS10594 code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing
Security vulnerability affects the bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing...
CVE-2026-113650
A flaw was found in sanitize-html. A remote attacker can cause a Denial of Service DoS by submitting specially crafted HTML input containing disallowed iframe elements. Under default configurations, the library re-sanitizes iframe content through unbounded recursive calls, exhausting system...
PT-2026-108632
Impact The streaming decoder recursively invokes itself for every complete value remaining in a chunk. A single chunk containing many small valid MessagePack values can exhaust the JavaScript call stack and interrupt the process or stream. Patches The streaming decoder now drains concatenated...
CVE-2026-106449
A flaw was found in lz4-java. This issue can lead to a Denial of Service DoS when the LZ4 input stream is configured not to stop upon encountering empty blocks. In this non-default configuration, consecutive empty blocks are processed via recursive calls rather than iterative handling. A remote...
CVE-2026-72705
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument to a second fixpoint, which then applies it to a value that is not a subterm of the structural argument. Passing the recursive function t...
CVE-2026-54269
A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing specially crafted protobuf definitions or message types that contain names colliding with internal protobufjs runtime helpers. This could lea...
CVE-2019-20016
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue...
EUVD-2025-200073
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls...
CVE-2025-40206: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftobjref: validate objref and objrefmap expressions Referencing a synproxy stateful object from OUTPUT hook causes kernel crash due to infinite recursive calls: BUG: TASK stack guard page was hit at 000000008bda5b8c...
CLSA-2025-1760020311 Fix CVE(s): CVE-2025-9714
SECURITY UPDATE: uncontrolled recursion leading to stack overflow via crafted XPath expressions - debian/patches/CVE-2025-9714.patch: Make XPath depth check work with recursive invocations to prevent stack overflows - CVE-2025-9714...
EUVD-2019-10572
Malware in sbrugna...
EUVD-2011-4864
Malware in sbrugna...
EUVD-2021-17393
Malware in sbrugna...
EUVD-2019-18457
Malware in sbrugna...
EUVD-2019-15856
Malware in sbrugna...
EUVD-2018-9759
Malware in sbrugna...
EUVD-2014-4257
Malware in sbrugna...
EUVD-2019-6935
Malware in sbrugna...