CWE-248

242 vulnerabilities with CWE-248

CVE-2025-36539 MEDIUM

AVEVA PI Data Archive 2023-2023 P1/2018 SP3 P4-P6 - Authenticated DoS via Uncaught Exception

CVSS 6.5

CVE-2025-48907 MEDIUM

HarmonyOS - Denial of Service via IPC Module Deserialization

CVSS 6.2

CVE-2025-48997 HIGH

multer >=1.4.4-lts.1 <2.0.1 - Denial of Service via Empty String Field Name

CVE-2025-29785 HIGH

quic-go 0.50.0 - Denial of Service via Path Probe Packet Handling

CVSS 7.5

CVE-2025-48943 MEDIUM

vLLM 0.8.0-0.8.9 - Denial of Service via Invalid Regex in Structured Output

CVSS 6.5

CVE-2025-48942 MEDIUM

vllm 0.8.0-0.9.0 - Denial of Service via Invalid JSON Schema in /v1/completions API

CVSS 6.5

CVE-2025-47944 HIGH

multer 1.4.4-lts.1-2.0.0 - Denial of Service via Malformed Multi-Part Upload Request

CVSS 7.5

CVE-2025-23166 HIGH

Node.js < 20.19.1, 22.0-22.14.9, 23.0-23.10.9, 24.0 - Denial of Service via SignTraits::DeriveBits Exception

CVSS 7.5

CVE-2025-20054 MEDIUM

Intel(R) Processors - Authenticated Denial of Service via Core Management Mechanism

CVSS 6.5

CVE-2025-3891 HIGH

Apache HTTP Server - Denial of Service via Empty POST Request with OIDCPreservePost Enabled

CVSS 7.5

CVE-2025-43855 HIGH

tRPC 11.0.0-11.1.1 - Unauthenticated Denial of Service via Invalid WebSocket ConnectionParams

CVE-2025-32944 MEDIUM

PeerTube < 7.1.1 - Authenticated Denial of Service via Archive Import Filename Handling

CVSS 6.5

CVE-2025-20664 HIGH

MediaTek Software Development Kit < 7.4.0.1 - Information Disclosure via Uncaught Exception in WLAN AP Driver

CVSS 7.5

CVE-2025-20663 HIGH

MediaTek Software Development Kit < 7.4.0.1 - Remote Information Disclosure via Uncaught Exception in WLAN AP Driver

CVSS 7.5

CVE-2025-3083 HIGH

MongoDB <5.0.31, <6.0.20, <7.0.16 - DoS

CVSS 7.5

CVE-2025-24836 HIGH

Qardio Heart Health iOS <2.7.4 & Android <2.5.1 - DoS via Bluetooth Command Flood

CVSS 7.1

CVE-2025-20097 MEDIUM

Intel Server M50FCP/D50DNP < R01.02.0002 - DoS via OpenBMC Uncaught Exception

CVSS 4.3

CVE-2025-0158 MEDIUM

IBM EntireX 11.1 - Denial of Service via Unhandled Error

CVSS 5.5

CVE-2025-20176 HIGH

Cisco IOS - Authenticated Denial of Service via SNMP Request Parsing

CVSS 7.7

CVE-2025-20173 HIGH

Cisco IOS Software - Cisco IOS XE Software - DoS

CVSS 7.7

CVE-2025-20172 HIGH

Cisco IOS - Authenticated Denial of Service via SNMP Request Parsing

CVSS 7.7

CVE-2025-20171 HIGH

Cisco IOS Software - Cisco IOS XE Software - DoS

CVSS 7.7

CVE-2025-20637 HIGH

MediaTek Software Development Kit < 7.6.7.0 - Remote Denial of Service via Uncaught Exception

CVSS 7.5

CVE-2025-24883 HIGH

go-ethereum 1.14.0-1.14.12 - Denial of Service via Crafted Message

CVE-2025-0648 MEDIUM

M-Files Server <25.1.14445.5, <24.8 LTS SR3 - DoS

CVSS 4.9