Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2019-12-12 CVE-2019-10485 Infinite Loop vulnerability in Qualcomm products
Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
network
low complexity
qualcomm CWE-835
7.5
2019-12-12 CVE-2019-5091 Infinite Loop vulnerability in Leadtools 20.0.2019.3.15
An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15.
network
low complexity
leadtools CWE-835
7.5
2019-12-11 CVE-2019-19582 Infinite Loop vulnerability in multiple products
An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) because certain bit iteration is mishandled.
local
low complexity
xen fedoraproject CWE-835
6.5
2019-12-05 CVE-2019-18180 Infinite Loop vulnerability in Otrs
Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g.
network
low complexity
otrs CWE-835
7.5
2019-12-05 CVE-2019-19588 Infinite Loop vulnerability in Validators Project Validators
The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string.
network
low complexity
validators-project CWE-835
7.5
2019-12-03 CVE-2019-5097 Infinite Loop vulnerability in Embedthis Goahead 3.6.5/4.1.1/5.0.1
A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5.
network
low complexity
embedthis CWE-835
7.5
2019-11-29 CVE-2019-19451 Infinite Loop vulnerability in multiple products
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout.
local
low complexity
gnome fedoraproject opensuse CWE-835
5.5
2019-11-26 CVE-2019-18455 Infinite Loop vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building Nested GraphQL queries.
network
low complexity
gitlab CWE-835
7.5
2019-11-26 CVE-2019-19307 Infinite Loop vulnerability in Cesanta Mongoose 6.16
An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.
network
low complexity
cesanta CWE-835
critical
9.8
2019-11-22 CVE-2015-5694 Infinite Loop vulnerability in multiple products
Designate does not enforce the DNS protocol limit concerning record set sizes
network
low complexity
openstack redhat debian CWE-835
6.5