CWE-1325 · Denial of Service
Improperly Controlled Sequential Memory Allocation
26CVEs
SortMost likely exploited
26 CVEs with CWE-1325 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-2511Unbounded memory growth with session handling in TLSv1.3OpenSSL · OpenSSL · CVSS 5.9 · 2024-04-08 | 5.9 | 59% | 2024-04-08 |
| CVE-2023-3341A stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyISC · BIND 9 · CVSS 7.5 · 2023-09-20 | 7.5 | 2.9% | 2023-09-20 |
| CVE-2024-27804The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be abl…Apple · iOS and iPadOS · CVSS 8.1 · 2024-05-13 | 8.1 | 1.3% | 2024-05-13 |
| CVE-2025-2240Smallrye-fault-tolerance: smallrye fault toleranceRedhat · smallrye-fault-tolerance-core · CVSS 7.5 · 2025-03-12 | 7.5 | 1.2% | 2025-03-12 |
| CVE-2021-43174gzip transfer encoding caused out-of-memory crashNLnet Labs · Routinator · 2021-11-09 | – | 1.1% | 2021-11-09 |
| CVE-2026-34183Unbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerOpenSSL · OpenSSL · CVSS 7.5 · 2026-06-09 | 7.5 | 1.0% | 2026-06-09 |
| CVE-2026-92707MessagePack: Nested arrays can blow past buffer length limitsMessagePack-CSharp · MessagePack-CSharp · CVSS 5.3 · 2026-10-15 | 5.3 | 0.7% | 2026-10-15 |
| CVE-2025-47908Denial of service via malicious preflight requests in github.com/rs/corsgithub.com/rs/cors · github.com/rs/cors · CVSS 7.5 · 2025-08-06 | 7.5 | 0.7% | 2025-08-06 |
| CVE-2023-28968Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail openJuniper Networks · Junos OS · CVSS 5.3 · 2023-04-17 | 5.3 | 0.6% | 2023-04-17 |
| CVE-2026-126366msgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOMmsgpack · msgpack-ruby · CVSS 7.5 · 2026-11-12 | 7.5 | 0.5% | 2026-11-12 |
| CVE-2026-54081veraPDF Parser DoS via PostScript Type 1 Font ProgramsveraPDF · veraPDF-parser · CVSS 6.9 · 2026-07-29 | 6.9 | 0.5% | 2026-07-29 |
| CVE-2026-54080veraPDF Parser DoS via PostScript CMap StreamsveraPDF · veraPDF-parser · CVSS 6.9 · 2026-07-29 | 6.9 | 0.5% | 2026-07-29 |
| CVE-2026-128125AIOHTTP: Unbounded cookie storage in client CookieJaraio-libs · aiohttp · CVSS 6.3 · 2026-11-13 | 6.3 | 0.5% | 2026-11-13 |
| CVE-2023-52891A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), S…Siemens · SIMATIC Energy Manager Basic · CVSS 5.3 · 2024-07-09 | 5.3 | 0.5% | 2024-07-09 |
| CVE-2026-24819An out-of-memory (OOM) issue in foxinmy/weixin4jfoxinmy · weixin4j · CVSS 6.3 · 2026-01-27 | 6.3 | 0.4% | 2026-01-27 |
| CVE-2026-13056A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAMMongoDB · MongoDB Server · CVSS 6.5 · 2026-07-22 | 6.5 | 0.4% | 2026-07-22 |
| CVE-2026-18772Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.Samsung Open Source · rlottie · CVSS 6.5 · 2026-08-04 | 6.5 | 0.4% | 2026-08-04 |
| CVE-2026-8199Post-auth memory exhaustion via bitwise match expressionsMongoDB, Inc. · MongoDB Server · CVSS 6.5 · 2026-05-13 | 6.5 | 0.3% | 2026-05-13 |
| CVE-2024-27796The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventur…Apple · iOS and iPadOS · CVSS 8.1 · 2024-05-13 | 8.1 | 0.3% | 2024-05-13 |
| CVE-2025-13945Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2025-12-03 | 5.5 | 0.2% | 2025-12-03 |
| CVE-2026-3201Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 4.7 · 2026-02-25 | 4.7 | 0.2% | 2026-02-25 |
| CVE-2026-6533Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-04-30 | 5.5 | 0.1% | 2026-04-30 |
| CVE-2026-6535Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-04-30 | 5.5 | 0.1% | 2026-04-30 |
| CVE-2026-96421Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-09-29 | 5.5 | 0.1% | 2026-09-29 |
| CVE-2026-6869Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-04-30 | 5.5 | 0.1% | 2026-04-30 |
| CVE-2026-6867Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-04-30 | 5.5 | 0.1% | 2026-04-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.