CWE-674 · 560 records
Uncontrolled Recursion
CVEs in this class
560 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
50Plan | CVE-2024-25111No exploit | SQUID-2024:1 Denial of Service in HTTP Chunked Decodingsquid-cache · squid · CWE-674 | High7.5 | — | 65.3% | Mar 6, 2024 |
47Plan | CVE-2023-50269No exploit | SQUID-2023:10 Denial of Service in HTTP Request parsingsquid-cache · squid · CWE-674 | High7.5 | — | 57.6% | Dec 14, 2023 |
41Plan | CVE-2021-42697Proof of concept | Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote atakka · http server · CWE-674 | High7.5 | — | 36.1% | Nov 2, 2021 |
39Monitor | CVE-2018-1000618No exploit | EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that ceosio project · eos · CWE-674 | Critical9.8 | — | 1.5% | Jul 9, 2018 |
39Monitor | CVE-2021-41752No exploit | Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recurjerryscript · jerryscript · CWE-674 | Critical9.8 | — | 1.2% | Apr 5, 2022 |
39Monitor | CVE-2023-51803No exploit | LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.CWE-674 | Critical9.8 | — | 0.7% | Mar 31, 2024 |
39Monitor | CVE-2026-43185No exploit | ksmbd: fix signededness bug in smb_direct_prepare_negotiation()linux · linux kernel · CWE-674 | Critical9.8 | — | 0.7% | May 6, 2026 |
39Monitor | CVE-2026-25971No exploit | ImageMagick's MSL: Stack overflow in ProcessMSLScriptimagemagick · imagemagick · CWE-674 | Critical9.8 | — | 0.4% | Feb 23, 2026 |
37Monitor | CVE-2025-10728No exploit | Uncontrolled recursion in Qt SVG moduleqt · qt · CWE-674 | Critical9.4 | — | 0.2% | Oct 3, 2025 |
36Monitor | CVE-2007-1285Proof of concept | The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHphp · php · CWE-674 | High7.5 | — | 18.8% | Mar 6, 2007 |
36Monitor | CVE-2019-9543No exploit | An issue was discovered in Poppler 0.74.0.freedesktop · poppler · CWE-674 | High8.8 | — | 3.3% | Mar 1, 2019 |
36Monitor | CVE-2019-9144No exploit | An issue was discovered in Exiv2 0.27.exiv2 · exiv2 · CWE-674 | High8.8 | — | 2.8% | Feb 25, 2019 |
36Monitor | CVE-2019-9143No exploit | An issue was discovered in Exiv2 0.27.exiv2 · exiv2 · CWE-674 | High8.8 | — | 2.8% | Feb 25, 2019 |
36Monitor | CVE-2019-9545No exploit | An issue was discovered in Poppler 0.74.0.freedesktop · poppler · CWE-674 | High8.8 | — | 1.8% | Mar 1, 2019 |
36Monitor | CVE-2026-40324No exploit | Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documentschillicream · graphql-platform · CWE-674 | Critical9.1 | — | 1.0% | Apr 17, 2026 |
36Monitor | CVE-2026-32327No exploit | Apache Portable Runtime Utility: apr-util XML stack recursion crashapache · apr-util · CWE-674 | Critical9.1 | — | 0.5% | Aug 6, 2026 |
35Monitor | CVE-2024-37973No exploit | Secure Boot Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-674 | High8.8 | — | 0.6% | Jul 9, 2024 |
34Monitor | CVE-2026-25048No exploit | xgrammar: Multi-layer nesting causes DoSmlc-ai · xgrammar · CWE-674 | High8.7 | — | 1.2% | Mar 5, 2026 |
34Monitor | CVE-2026-3520No exploit | Multer vulnerable to Denial of Service via uncontrolled recursionexpressjs · multer · CWE-674 | High8.7 | — | 1.0% | Mar 4, 2026 |
34Monitor | CVE-2026-61551No exploit | Icinga 2: Stack overflow via deeply nested JSON objectsicinga · icinga2 · CWE-674 | High8.6 | — | 0.9% | Sep 18, 2026 |
34Monitor | CVE-2026-93450No exploit | go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshalgo-openapi · swag · CWE-674 | High8.7 | — | 0.9% | Sep 17, 2026 |
34Monitor | CVE-2026-41673No exploit | xmldom: Denial of service via uncontrolled recursion in XML serializationxmldom · xmldom · CWE-674 | High8.7 | — | 0.9% | May 7, 2026 |
34Monitor | CVE-2026-93687Proof of concept | braces through 3.0.3 Stack Overflow via Deeply Nested Patternsmicromatch · braces · CWE-674 | High8.7 | — | 0.8% | Sep 18, 2026 |
34Monitor | CVE-2026-41636No exploit | Apache Thrift: Node.js skip() recursionapache · thrift · CWE-674 | High8.7 | — | 0.7% | Apr 28, 2026 |
34Monitor | CVE-2026-69220No exploit | RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoSrabbitmq · rabbitmq-java-client · CWE-674 | High8.7 | — | 0.7% | Aug 18, 2026 |
- CVE-2024-2511150Plan
SQUID-2024:1 Denial of Service in HTTP Chunked Decoding
HighCVSS 7.5No exploitEPSS 65%squid-cache · squidMar 6, 2024
- CVE-2023-5026947Plan
SQUID-2023:10 Denial of Service in HTTP Request parsing
HighCVSS 7.5No exploitEPSS 58%squid-cache · squidDec 14, 2023
- CVE-2021-4269741Plan
Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote at
HighCVSS 7.5Proof of conceptEPSS 36%akka · http serverNov 2, 2021
- CVE-2018-100061839Monitor
EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that c
CriticalCVSS 9.8No exploitEPSS 2%eosio project · eosJul 9, 2018
- CVE-2021-4175239Monitor
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recur
CriticalCVSS 9.8No exploitEPSS 1%jerryscript · jerryscriptApr 5, 2022
- CVE-2023-5180339Monitor
LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
CriticalCVSS 9.8No exploitEPSS 1%Mar 31, 2024
- CVE-2026-4318539Monitor
ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
CriticalCVSS 9.8No exploitEPSS 1%linux · linux kernelMay 6, 2026
- CVE-2026-2597139Monitor
ImageMagick's MSL: Stack overflow in ProcessMSLScript
CriticalCVSS 9.8No exploitEPSS 0%imagemagick · imagemagickFeb 23, 2026
- CVE-2025-1072837Monitor
Uncontrolled recursion in Qt SVG module
CriticalCVSS 9.4No exploitEPSS 0%qt · qtOct 3, 2025
- CVE-2007-128536Monitor
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PH
HighCVSS 7.5Proof of conceptEPSS 19%php · phpMar 6, 2007
- CVE-2019-954336Monitor
An issue was discovered in Poppler 0.74.0.
HighCVSS 8.8No exploitEPSS 3%freedesktop · popplerMar 1, 2019
- CVE-2019-914436Monitor
An issue was discovered in Exiv2 0.27.
HighCVSS 8.8No exploitEPSS 3%exiv2 · exiv2Feb 25, 2019
- CVE-2019-914336Monitor
An issue was discovered in Exiv2 0.27.
HighCVSS 8.8No exploitEPSS 3%exiv2 · exiv2Feb 25, 2019
- CVE-2019-954536Monitor
An issue was discovered in Poppler 0.74.0.
HighCVSS 8.8No exploitEPSS 2%freedesktop · popplerMar 1, 2019
- CVE-2026-4032436Monitor
Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents
CriticalCVSS 9.1No exploitEPSS 1%chillicream · graphql-platformApr 17, 2026
- CVE-2026-3232736Monitor
Apache Portable Runtime Utility: apr-util XML stack recursion crash
CriticalCVSS 9.1No exploitEPSS 0%apache · apr-utilAug 6, 2026
- CVE-2024-3797335Monitor
Secure Boot Security Feature Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 1%microsoft · windows 10 1507Jul 9, 2024
- CVE-2026-2504834Monitor
xgrammar: Multi-layer nesting causes DoS
HighCVSS 8.7No exploitEPSS 1%mlc-ai · xgrammarMar 5, 2026
- CVE-2026-352034Monitor
Multer vulnerable to Denial of Service via uncontrolled recursion
HighCVSS 8.7No exploitEPSS 1%expressjs · multerMar 4, 2026
- CVE-2026-6155134Monitor
Icinga 2: Stack overflow via deeply nested JSON objects
HighCVSS 8.6No exploitEPSS 1%icinga · icinga2Sep 18, 2026
- CVE-2026-9345034Monitor
go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal
HighCVSS 8.7No exploitEPSS 1%go-openapi · swagSep 17, 2026
- CVE-2026-4167334Monitor
xmldom: Denial of service via uncontrolled recursion in XML serialization
HighCVSS 8.7No exploitEPSS 1%xmldom · xmldomMay 7, 2026
- CVE-2026-9368734Monitor
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
HighCVSS 8.7Proof of conceptEPSS 1%micromatch · bracesSep 18, 2026
- CVE-2026-4163634Monitor
Apache Thrift: Node.js skip() recursion
HighCVSS 8.7No exploitEPSS 1%apache · thriftApr 28, 2026
- CVE-2026-6922034Monitor
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
HighCVSS 8.7No exploitEPSS 1%rabbitmq · rabbitmq-java-clientAug 18, 2026