CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
886 vulnerabilities with CWE-835
CVE-2025-71330
HIGH
image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing
CVSS 7.5
CVE-2025-71329
HIGH
image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
CVSS 7.5
CVE-2025-71319
HIGH
image-size < 1.2.1, 2.0.2 - Denial of Service via Infinite Loop in findBox Function
CVSS 7.5
CVE-2025-71267
MEDIUM
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
CVSS 5.5
CVE-2025-71266
MEDIUM
fs: ntfs3: check return value of indx_find to avoid infinite loop
CVSS 5.5
CVE-2025-71265
MEDIUM
fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
CVSS 5.5
CVE-2025-69648
MEDIUM
GNU Binutils < 2.45.1 - Denial of Service via Malformed DWARF .debug_rnglists Data
CVSS 6.2
CVE-2025-69647
MEDIUM
GNU Binutils < 2.45.1 - Denial of Service via Malformed DWARF Loclists Data
CVSS 6.2
CVE-2025-27560
MEDIUM
Intel(R) Platform - Denial of Service via Infinite Loop in Ring 0
CVSS 6.0
CVE-2025-58190
MEDIUM
go/html < 0.45.0 - Denial of Service via Infinite Parsing Loop
CVSS 5.3
CVE-2025-64438
HIGH
Fast DDS <3.4.1, 3.3.1, 2.6.11 - DoS
CVSS 7.5
CVE-2025-13335
MEDIUM
GitLab 17.1-18.6.3, 18.7-18.7.1, 18.8-18.8.1 - Authenticated Denial of Service via Wiki Cycle Detection Bypass
CVSS 6.5
CVE-2025-68137
HIGH
EVerest < 2025.10.0 - Infinite Loop via SdpPacket Header Parsing
CVSS 8.3
CVE-2025-69227
HIGH
aiohttp < 3.13.3 - Denial of Service via POST Body Processing
CVSS 7.5
CVE-2025-13946
MEDIUM
Wireshark 4.4.0-4.4.11 and 4.6.0-4.6.1 - Denial of Service via MEGACO Dissector Infinite Loop
CVSS 5.5
CVE-2025-66252
HIGH
DB Electronica Mozart FM Transmitter DoS via Failed File Deletion in status_contents.php
CVSS 7.5
CVE-2025-41075
HIGH
LimeSurvey 6.13.0 - Denial of Service via Infinite Redirect Loop in /optin Endpoint
CVSS 7.5
CVE-2025-41074
HIGH
LimeSurvey 6.13.0 - Denial of Service via Infinite Redirect Loop in /optout Endpoint
CVSS 7.5
CVE-2025-63829
HIGH
eProsima Fast-DDS <v3.3 - Memory Corruption
CVSS 7.5
CVE-2025-60753
MEDIUM
libarchive < 3.8.1 - Denial of Service via Crafted Substitution Rules
CVSS 5.5
CVE-2025-11626
MEDIUM
Wireshark 4.2.0-4.2.13 4.4.0-4.4.9 - Denial of Service via MONGO Dissector Infinite Loop
CVSS 5.5
CVE-2025-20312
HIGH
Cisco IOS XE Software 17.2.1-17.3.3 DoS via SNMP Request Parsing
CVSS 7.7
CVE-2025-30187
LOW
DNSdist 1.9.0-1.9.10 and 2.0.0 - Denial of Service via nghttp2 DoH I/O Read Loop
CVSS 3.7
CVE-2025-55118
HIGH
Control-M/Agent <9.0.20,9.0.21,9.0.22 - Memory Corruption
CVSS 8.9
CVE-2025-38727
MEDIUM
Linux Kernel - Denial of Service via Infinite Loop in netlink_unicast()
CVSS 5.5
Details
Vulnerabilities
886