Memory Allocation with Excessive Size Value

Every one of the 325 is a mark on the map. Named now: 1 to 26, most at risk first.

1. mod_sed denial of serviceCVE-2022-30522Apache Software Foundation · 90% likely

   Apache

2. CVE-2024-2653AMPHP · CVSS 8.2 · 80% likely
3. Apache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Apache Software Foundation · CVSS 7.5 · 33% likely

   Apache

4. Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocationCVE-2025-27533Apache Software Foundation · CVSS 6.9 · 9.1% likely

   Apache

5. In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authe…CVE-2017-7651The Eclipse Foundation · 5.1% likely

   Eclipse Foundation

6. A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileCVE-2021-31811Apache Software Foundation · 3.6% likely

   Apache

7. A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Apache Software Foundation · 3.3% likely

   Apache

8. Kubernetes API server denial of serviceCVE-2020-8552Kubernetes · CVSS 5.3 · 2.8% likely

   Kubernetes

9. Undertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Red Hat · CVSS 7.5 · 2.7% likely

   Red Hat

10. In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request bo…CVE-2018-12541The Eclipse Foundation · 2.7% likely

    Eclipse Foundation

11. AC500 V2 unauthenticated crafter packet vulnerabilityCVE-2020-24685ABB · CVSS 8.6 · 1.6% likely

    ABB

12. In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from d…CVE-2017-7652The Eclipse Foundation · 1.6% likely

    Eclipse Foundation

13. Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCacheCVE-2026-66733Eukaryot · CVSS 7.5 · 1.6% likely
14. Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow…CVE-2022-22188Juniper Networks · CVSS 7.5 · 1.5% likely

    Juniper Networks

15. Unauthenticated clients may cause OutOfMemoryError on Apache Kafka BrokersCVE-2022-34917Apache Software Foundation · CVSS 7.5 · 1.5% likely

    Apache

16. WEKA INTEREST Security Scanner Portscan memory allocationCVE-2017-20016WEKA · CVSS 4.3 · 1.5% likely

    WEKA

17. Denial of service in TendermintCVE-2020-5303Tendermint · CVSS 3.1 · 1.4% likely
18. Kubernetes kubelet denial of serviceCVE-2020-8551Kubernetes · CVSS 4.3 · 1.2% likely

    Kubernetes1 bounty report

19. Cisco Expressway Series and TelePresence Video Communication Server Denial of Service VulnerabilityCVE-2020-3596Cisco · CVSS 5.9 · 1.2% likely

    Cisco

20. Slice Memory Allocation with Excessive Size Value in binaryCVE-2022-36078gagliardetto · CVSS 8.8 · 1.2% likely
21. CODESYS Gateway server prone to denial of service attack due to excessive memory allocationCVE-2022-31804CODESYS · CVSS 7.5 · 1.2% likely

    CODESYS

22. Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityCVE-2026-40378Microsoft · CVSS 7.5 · 1.2% likely

    Microsoft

23. Specific recursive query patterns may lead to an out-of-memory conditionCVE-2023-6516ISC · CVSS 7.5 · 1.1% likely

    Isc

24. Eap-7: heap exhaustion via deserializationCVE-2023-3171Red Hat · CVSS 7.5 · 1.0% likely

    Red Hat

25. A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remot…CVE-2023-20108Cisco · CVSS 7.5 · 0.9% likely

    Cisco

26. NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityCVE-2026-42946F5 · CVSS 6.5 · 0.9% likely

    F5

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.