CWE-1325 · 24 records

Improperly Controlled Sequential Memory Allocation

CVEs in this class

24 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2024-2511No exploit	Unbounded memory growth with session handling in TLSv1.3openssl · openssl · CWE-1325 Pre-auth Denial of service	Medium5.9	—	59.3%	Apr 8, 2024
31Monitor	CVE-2024-27796No exploit	The issue was addressed with improved checks.apple · ipados · CWE-1325 Local privilege escalation	High7.8	—	0.2%	May 14, 2024
30Monitor	CVE-2025-2240No exploit	Smallrye-fault-tolerance: smallrye fault tolerancered hat · red hat build of apache camel 4.8.5 for spring boot · CWE-1325 Pre-auth Denial of service	High7.5	—	1.2%	Mar 12, 2025
30Monitor	CVE-2021-43174No exploit	gzip transfer encoding caused out-of-memory crashnlnetlabs · routinator · CWE-1325 Pre-auth Denial of service	High7.5	—	1.1%	Nov 9, 2021
30Monitor	CVE-2026-34183No exploit	Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handleropenssl · openssl · CWE-1325 Pre-auth Denial of service	High7.5	—	1.0%	Jun 9, 2026
30Monitor	CVE-2025-47908No exploit	Denial of service via malicious preflight requests in github.com/rs/corsgithub.com/rs/cors · github.com/rs/cors · CWE-1325 Pre-auth Denial of service	High7.5	—	0.6%	Aug 6, 2025
30Monitor	CVE-2026-3201No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Pre-auth Denial of service	High7.5	—	0.2%	Feb 25, 2026
30Monitor	GHSA-f5v8-v6q3-q4h6No exploit	Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)NuGet · Meridian.Mapping · CWE-1325 Pre-auth Denial of service	High7.5	—	—	Apr 16, 2026
28Monitor	CVE-2026-13056No exploit	A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAMmongodb · mongodb · CWE-1325	High7.1	—	0.4%	Jul 22, 2026
28Monitor	CVE-2026-8199No exploit	Post-auth memory exhaustion via bitwise match expressionsmongodb · mongodb · CWE-1325	High7.1	—	0.2%	May 13, 2026
27Monitor	CVE-2026-54081No exploit	veraPDF Parser DoS via PostScript Type 1 Font Programsverapdf · verapdf-parser · CWE-1325 Pre-auth	Medium6.9	—	0.5%	Jul 29, 2026
27Monitor	CVE-2026-54080No exploit	veraPDF Parser DoS via PostScript CMap Streamsverapdf · verapdf-parser · CWE-1325 Pre-auth	Medium6.9	—	0.5%	Jul 29, 2026
26Monitor	CVE-2026-18772No exploit	Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.samsung · rlottie · CWE-1325 Pre-auth Denial of service	Medium6.5	—	0.3%	Aug 4, 2026
25Monitor	CVE-2026-24819No exploit	An out-of-memory (OOM) issue in foxinmy/weixin4jfoxinmy · weixin4j · CWE-1325 Pre-auth	Medium6.3	—	0.4%	Jan 27, 2026
22Monitor	CVE-2025-13945No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.2%	Dec 3, 2025
22Monitor	CVE-2026-6533No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-6535No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-96421No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Sep 29, 2026
22Monitor	CVE-2026-6869No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-6867No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
21Monitor	CVE-2026-92707No exploit	MessagePack: Nested arrays can blow past buffer length limitsmessagepack-csharp · messagepack-csharp · CWE-1325 Pre-auth Deserialization Denial of service	Medium5.3	—	0.6%	Oct 15, 2026
21Monitor	CVE-2023-28968No exploit	Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail openjuniper · appid service sigpack · CWE-1325 Pre-auth	Medium5.3	—	0.5%	Apr 17, 2023
21Monitor	CVE-2023-52891No exploit	A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5),siemens · simatic energy manager basic · CWE-1325 Pre-auth Denial of service	Medium5.3	—	0.4%	Jul 9, 2024
21Monitor	GHSA-86xp-94pg-8r6rNo exploit	Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service VulnerabilityCWE-1325 Pre-auth Deserialization Denial of service	Medium5.3	—	—	Oct 13, 2026

CVE-2024-2511
41Plan
Unbounded memory growth with session handling in TLSv1.3
MediumCVSS 5.9No exploitEPSS 59%
- Pre-auth
- Denial of service
openssl · opensslApr 8, 2024
CVE-2024-27796
31Monitor
The issue was addressed with improved checks.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · ipadosMay 14, 2024
CVE-2025-2240
30Monitor
Smallrye-fault-tolerance: smallrye fault tolerance
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat build of apache camel 4.8.5 for spring bootMar 12, 2025
CVE-2021-43174
30Monitor
gzip transfer encoding caused out-of-memory crash
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
nlnetlabs · routinatorNov 9, 2021
CVE-2026-34183
30Monitor
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
openssl · opensslJun 9, 2026
CVE-2025-47908
30Monitor
Denial of service via malicious preflight requests in github.com/rs/cors
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
github.com/rs/cors · github.com/rs/corsAug 6, 2025
CVE-2026-3201
30Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
wireshark · wiresharkFeb 25, 2026
GHSA-f5v8-v6q3-q4h6
30Monitor
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
NuGet · Meridian.MappingApr 16, 2026
CVE-2026-13056
28Monitor
A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbJul 22, 2026
CVE-2026-8199
28Monitor
Post-auth memory exhaustion via bitwise match expressions
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbMay 13, 2026
CVE-2026-54081
27Monitor
veraPDF Parser DoS via PostScript Type 1 Font Programs
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
verapdf · verapdf-parserJul 29, 2026
CVE-2026-54080
27Monitor
veraPDF Parser DoS via PostScript CMap Streams
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
verapdf · verapdf-parserJul 29, 2026
CVE-2026-18772
26Monitor
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung · rlottieAug 4, 2026
CVE-2026-24819
25Monitor
An out-of-memory (OOM) issue in foxinmy/weixin4j
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
foxinmy · weixin4jJan 27, 2026
CVE-2025-13945
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkDec 3, 2025
CVE-2026-6533
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-6535
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-96421
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkSep 29, 2026
CVE-2026-6869
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-6867
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-92707
21Monitor
MessagePack: Nested arrays can blow past buffer length limits
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
messagepack-csharp · messagepack-csharpOct 15, 2026
CVE-2023-28968
21Monitor
Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
juniper · appid service sigpackApr 17, 2023
CVE-2023-52891
21Monitor
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5),
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
siemens · simatic energy manager basicJul 9, 2024
GHSA-86xp-94pg-8r6r
21Monitor
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
MediumCVSS 5.3No exploit
- Pre-auth
- Deserialization
- Denial of service
Oct 13, 2026

All vulnerability classes