CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
886 vulnerabilities with CWE-835
CVE-2026-54417
HIGH
Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS
CVSS 7.5
CVE-2026-48733
MEDIUM
ImageMagick: Infinite Loop in subimage-search with crafted image
CVSS 4.7
CVE-2026-46521
MEDIUM
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
CVSS 5.5
CVE-2026-46522
HIGH
ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
CVSS 7.5
CVE-2026-49495
MEDIUM
Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser
CVSS 5.5
CVE-2026-46314
MEDIUM
drm/v3d: Reject empty multisync extension to prevent infinite loop
CVSS 5.5
CVE-2026-44186
HIGH
Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp
CVSS 7.3
CVE-2026-44740
MEDIUM
go-billy < 5.9.0 - Symlink Resolution Resource Exhaustion
CVSS 6.5
CVE-2026-46385
HIGH
iskorotkov/avro: CPU Exhaustion in Avro Decoder
CVSS 7.5
CVE-2026-41150
MEDIUM
Mermaid Gantt Charts - Infinite Loop Denial of Service
CVSS 5.3
CVE-2026-10028
MEDIUM
glib-networking GnuTLS Backend - Certificate Chain Denial of Service
CVSS 4.3
CVE-2026-46146
MEDIUM
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
CVSS 5.5
CVE-2026-45919
MEDIUM
sched/rt: Skip currently executing CPU in rto_next_cpu()
CVSS 5.5
CVE-2026-45864
MEDIUM
fs/ntfs3: prevent infinite loops caused by the next valid being the same
CVSS 5.5
CVE-2026-49017
HIGH
Openstack Swift - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-47066
HIGH
Infinite loop in Alt-Svc header parser in hackney
CVSS 7.5
CVE-2026-32739
MEDIUM
libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup
CVSS 6.5
CVE-2026-43486
MEDIUM
arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults
CVSS 5.5
CVE-2026-42920
HIGH
F5 BIG-IP DTLS - TMM Denial of Service
CVSS 7.5
CVE-2026-42781
MEDIUM
F5 BIG-IP 16.1.0-21.1.0 - Denial of Service via ePVA Ethernet Traffic
CVSS 6.5
CVE-2026-39806
HIGH
HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit
CVSS 7.5
CVE-2026-44302
HIGH
Snappier: Infinite loop in SnappyStream decompression on malformed framed input
CVSS 7.5
CVE-2026-42899
HIGH
Microsoft ASP.NET Core - Infinite Loop Denial of Service
CVSS 7.5
CVE-2026-34962
MEDIUM
barebox ext4 Directory Parsing Infinite Loop Denial of Service
CVSS 6.2
CVE-2026-8318
MEDIUM
VectifyAI PageIndex PDF Table of Contents page_index.py toc_transformer infinite loop
CVSS 5.3
Details
Vulnerabilities
886