CWE-789 · Denial of Service
Memory Allocation with Excessive Size Value
325CVEs
0exploited
0with a public check
3likely (EPSS 10%+)
SortMost likely exploited
325 CVEs with CWE-789 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-30522mod_sed denial of serviceApache Software Foundation · Apache HTTP Server · 2022-06-08 | – | 90% | 2022-06-08 |
| CVE-2024-2653CVE-2024-2653AMPHP · amphp/http-client · CVSS 8.2 · 2024-04-03 | 8.2 | 80% | 2024-04-03 |
| CVE-2026-49975Apache HTTP Server: mod_http2 denial of serviceApache Software Foundation · Apache HTTP Server · CVSS 7.5 · 2026-06-08 | 7.5 | 33% | 2026-06-08 |
| CVE-2025-27533Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocationApache Software Foundation · Apache ActiveMQ · CVSS 6.9 · 2025-05-07 | 6.9 | 9.1% | 2025-05-07 |
| CVE-2017-7651In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authe…The Eclipse Foundation · Eclipse Mosquitto · 2018-04-24 | – | 5.1% | 2018-04-24 |
| CVE-2021-31811A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileApache Software Foundation · Apache PDFBox · 2021-06-12 | – | 3.6% | 2021-06-12 |
| CVE-2021-27906A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileApache Software Foundation · Apache PDFBox · 2021-03-19 | – | 3.3% | 2021-03-19 |
| CVE-2020-8552Kubernetes API server denial of serviceKubernetes · Kubernetes · CVSS 5.3 · 2020-03-27 | 5.3 | 2.8% | 2020-03-27 |
| CVE-2023-3223Undertow: outofmemoryerror due to @multipartconfig handlingRed Hat · Red Hat Fuse 7.12.1 · CVSS 7.5 · 2023-09-27 | 7.5 | 2.7% | 2023-09-27 |
| CVE-2018-12541In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request bo…The Eclipse Foundation · Eclipse Vert.x · 2018-10-10 | – | 2.7% | 2018-10-10 |
| CVE-2020-24685AC500 V2 unauthenticated crafter packet vulnerabilityABB · AC500 V2 products with onboard Ethernet · CVSS 8.6 · 2021-02-09 | 8.6 | 1.6% | 2021-02-09 |
| CVE-2017-7652In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from d…The Eclipse Foundation · Eclipse Mosquitto · 2018-04-25 | – | 1.6% | 2018-04-25 |
| CVE-2026-66733Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCacheEukaryot · sonic3air · CVSS 7.5 · 2026-08-06 | 7.5 | 1.6% | 2026-08-06 |
| CVE-2022-22188Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow…Juniper Networks · Junos OS · CVSS 7.5 · 2022-04-14 | 7.5 | 1.5% | 2022-04-14 |
| CVE-2022-34917Unauthenticated clients may cause OutOfMemoryError on Apache Kafka BrokersApache Software Foundation · Apache Kafka · CVSS 7.5 · 2022-09-20 | 7.5 | 1.5% | 2022-09-20 |
| CVE-2017-20016WEKA INTEREST Security Scanner Portscan memory allocationWEKA · INTEREST Security Scanner · CVSS 4.3 · 2022-03-28 | 4.3 | 1.5% | 2022-03-28 |
| CVE-2020-5303Denial of service in TendermintTendermint · Tendermint · CVSS 3.1 · 2020-04-10 | 3.1 | 1.4% | 2020-04-10 |
| CVE-2020-8551Kubernetes kubelet denial of serviceKubernetes · Kubernetes · CVSS 4.3 · 2020-03-27 | 4.3 | 1.2% | 2020-03-27 |
| CVE-2020-3596Cisco Expressway Series and TelePresence Video Communication Server Denial of Service VulnerabilityCisco · Cisco TelePresence Video Communication Server (VCS) Expressway · CVSS 5.9 · 2020-10-08 | 5.9 | 1.2% | 2020-10-08 |
| CVE-2022-36078Slice Memory Allocation with Excessive Size Value in binarygagliardetto · binary · CVSS 8.8 · 2022-09-02 | 8.8 | 1.2% | 2022-09-02 |
| CVE-2022-31804CODESYS Gateway server prone to denial of service attack due to excessive memory allocationCODESYS · CODESYS Gateway Server V2 · CVSS 7.5 · 2022-06-24 | 7.5 | 1.2% | 2022-06-24 |
| CVE-2026-40378Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-07-14 | 7.5 | 1.2% | 2026-07-14 |
| CVE-2023-6516Specific recursive query patterns may lead to an out-of-memory conditionISC · BIND 9 · CVSS 7.5 · 2024-02-13 | 7.5 | 1.1% | 2024-02-13 |
| CVE-2023-3171Eap-7: heap exhaustion via deserializationRed Hat · EAP 7.4.13 · CVSS 7.5 · 2023-12-27 | 7.5 | 1.0% | 2023-12-27 |
| CVE-2023-20108A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remot…Cisco · Cisco Unified Communications Manager IM and Presence Service · CVSS 7.5 · 2023-06-28 | 7.5 | 0.9% | 2023-06-28 |
| CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityF5 · NGINX Plus · CVSS 6.5 · 2026-05-13 | 6.5 | 0.9% | 2026-05-13 |
| CVE-2023-39203Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of informatio…Zoom Video Communications, Inc. · Zoom Rooms Client for Windows and Zoom VDI Client · CVSS 4.3 · 2023-11-14 | 4.3 | 0.9% | 2023-11-14 |
| CVE-2023-37279Faktory Web Dashboard can lead to denial of service(DOS) via malicious user inputcontribsys · faktory · CVSS 7.5 · 2023-09-20 | 7.5 | 0.9% | 2023-09-20 |
| CVE-2026-71314Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island renderingnuxt · nuxt · CVSS 7.5 · 2026-08-05 | 7.5 | 0.9% | 2026-08-05 |
| CVE-2023-24201Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.Oretnom23 · Raffle Draw System · CVSS 9.8 · 2023-02-06 | 9.8 | 0.9% | 2023-02-06 |
| CVE-2026-15567Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listenerRed Hat · Red Hat JBoss Enterprise Application Platform 7.4.25 · CVSS 7.5 · 2026-08-11 | 7.5 | 0.9% | 2026-08-11 |
| CVE-2025-20165Cisco BroadWorks SIP Denial of Service VulnerabilityCisco · Cisco BroadWorks · CVSS 7.5 · 2025-01-22 | 7.5 | 0.9% | 2025-01-22 |
| CVE-2022-4741docconv XMLToText memory allocationSearch · docconv · CVSS 4.3 · 2022-12-25 | 4.3 | 0.8% | 2022-12-25 |
| CVE-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payloadprometheus · prometheus · CVSS 7.5 · 2026-05-04 | 7.5 | 0.8% | 2026-05-04 |
| CVE-2026-65315Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata ParserOllama · Ollama · CVSS 7.5 · 2026-07-21 | 7.5 | 0.8% | 2026-07-21 |
| CVE-2024-52791Denial of service through memory exhaustion in Matrix Media Repot2bot · matrix-media-repo · CVSS 5.3 · 2025-01-16 | 5.3 | 0.8% | 2025-01-16 |
| CVE-2026-85445MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Countmoos-ivp · moos-ivp · CVSS 7.5 · 2026-09-03 | 7.5 | 0.8% | 2026-09-03 |
| CVE-2026-67589Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation · Apache Qpid ProtonJ2 · CVSS 7.5 · 2026-08-05 | 7.5 | 0.8% | 2026-08-05 |
| CVE-2026-67551Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation · Apache Qpid Proton Dotnet · CVSS 7.5 · 2026-08-05 | 7.5 | 0.8% | 2026-08-05 |
| CVE-2026-66273Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation · Apache Qpid Proton-J · CVSS 7.5 · 2026-08-05 | 7.5 | 0.8% | 2026-08-05 |
| CVE-2024-41132SixLabors ImageSharp Allows Excessive Memory Allocation in Gif DecoderSixLabors · ImageSharp · CVSS 5.3 · 2024-07-22 | 5.3 | 0.8% | 2024-07-22 |
| CVE-2026-85442MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocationthemoos · core-moos · CVSS 7.5 · 2026-09-03 | 7.5 | 0.8% | 2026-09-03 |
| CVE-2026-55407Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocationanthropics · buffa · CVSS 6.3 · 2026-07-16 | 6.3 | 0.8% | 2026-07-16 |
| CVE-2026-85324Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-10-13 | 7.5 | 0.8% | 2026-10-13 |
| CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE2GNU · libextractor · CVSS 7.5 · 2026-09-15 | 7.5 | 0.7% | 2026-09-15 |
| CVE-2026-67211Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializerApache Software Foundation · Apache OpenNLP · CVSS 7.5 · 2026-09-11 | 7.5 | 0.7% | 2026-09-11 |
| CVE-2026-53917Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshallingApache Software Foundation · Apache ActiveMQ · CVSS 7.5 · 2026-06-30 | 7.5 | 0.7% | 2026-06-30 |
| CVE-2026-53916Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codecApache Software Foundation · Apache ActiveMQ · CVSS 7.5 · 2026-06-30 | 7.5 | 0.7% | 2026-06-30 |
| CVE-2026-50734Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiationApache Software Foundation · Apache ActiveMQ Client · CVSS 7.5 · 2026-06-30 | 7.5 | 0.7% | 2026-06-30 |
| CVE-2026-69219RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocationrabbitmq · rabbitmq-java-client · CVSS 8.7 · 2026-08-18 | 8.7 | 0.7% | 2026-08-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.