CWE-1050

20 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 10Medium 8Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-85977
Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
Red Hat · Red Hat Hardened Images
Medium5.3
CVE-2026-100350
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
getkin · kin-openapi
Medium5.3
CVE-2026-94287
Denial of service via unsigned underflow in libXpm's write path
x.org · libXpm
Medium5.5
CVE-2026-81736
Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
ISC · BIND 9
High7.5
CVE-2026-52681
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the…
Open-Xchange GmbH · OX Dovecot Pro
Low3.1
CVE-2026-71488
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
thephpleague · commonmark
High7.5
CVE-2026-48779
ws: Memory exhaustion DoS from tiny fragments and data chunks
websockets · ws
High7.5
CVE-2026-44390
Unbounded name compression in certain cases causes degradation of service
NLnet Labs · Unbound
Medium6.9
CVE-2026-41292
Long list of incoming EDNS options degrades performance
NLnet Labs · Unbound
Medium6.6
CVE-2026-4634
Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters
Red Hat · Red Hat build of Keycloak 26.2
High7.5