CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
886 vulnerabilities with CWE-835
CVE-2026-41146
HIGH
facil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit condition
CVE-2026-34282
HIGH
Oracle Java SE & GraalVM DoS via Networking Component
CVSS 7.5
CVE-2026-41285
MEDIUM
OpenBSD < 7.8 - Denial of Service via Zero-Length ICMPv6 ND Option
CVSS 4.3
CVE-2026-28214
MEDIUM
Firebird server hangs when using specific clumplet on batch creation
CVSS 6.5
CVE-2026-33116
HIGH
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVSS 7.5
CVE-2026-34852
MEDIUM
Huawei HarmonyOS <6.0.0 - Buffer Overflow
CVSS 6.1
CVE-2026-39934
MEDIUM
Growth Experiments ReassignMenteesJob runs as an infinite loop
CVE-2026-35406
MEDIUM
Aardvark-dns has incorrect error handling for malformed tcp packets
CVSS 6.2
CVE-2026-23472
MEDIUM
serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
CVSS 5.5
CVE-2026-23451
HIGH
bonding: prevent potential infinite loop in bond_header_parse()
CVSS 7.5
CVE-2026-23409
MEDIUM
apparmor: fix differential encoding verification
CVSS 5.5
CVE-2026-33891
HIGH
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
CVSS 7.5
CVE-2026-33699
HIGH
pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
CVSS 7.5
CVE-2026-32287
HIGH
Infinite loop in github.com/antchfx/xpath
CVSS 7.5
CVE-2026-23298
MEDIUM
can: ucan: Fix infinite loop from zero-length messages
CVSS 5.5
CVE-2026-4598
HIGH
jsrsasign < 11.1.1 - Denial of Service via Infinite Loop in bnModInverse
CVSS 7.5
CVE-2026-33013
HIGH
Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices
CVSS 7.5
CVE-2026-32889
MEDIUM
tinytag: Denial of Service via non-terminating SYLT frame parsing loop
CVSS 6.5
CVE-2026-32875
HIGH
UltraJSON 5.10-5.11.0 Indent Handling - Integer Overflow Denial of Service
CVSS 7.5
CVE-2026-32873
HIGH
ewe: Loop with Unreachable Exit Condition ('Infinite Loop')
CVSS 7.5
CVE-2026-32256
HIGH
music-metadata <11.12.3 ASF Parser - Infinite Loop
CVSS 7.5
CVE-2026-30922
HIGH
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
CVSS 7.5
CVE-2026-4179
MEDIUM
stm32: usb: Infinite while loop in Interrupt Handler
CVSS 6.1
CVE-2026-32777
MEDIUM
libexpat < 2.7.5 - Denial of Service via Infinite Loop in DTD Parsing
CVSS 4.0
CVE-2026-4111
HIGH
Red Hat Enterprise Linux - Denial of Service via RAR5 Archive Decompression Infinite Loop
CVSS 7.5
Details
Vulnerabilities
886