CWE-835: Infinite loop

1,041 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 12High 461Medium 540Low 27Not scored 1

CVEs per yearBy the year they were published

CVE-2024-20353
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
Cisco · Cisco Adaptive Security Appliance (ASA) Software
ExploitedHigh8.6

CVE-2026-63475
isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
isomorphic-git · isomorphic-git
Medium4.3
CVE-2026-121261
phpMyAdmin ShapeFile SHP File loadFromFile infinite loop
phpMyAdmin · ShapeFile
Medium5.3
CVE-2026-121400
FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet
FreeRDP · FreeRDP
High7.1
CVE-2026-119738
Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()
Nexbox · A95X
Medium6.9
CVE-2026-120596
CVE-2026-120596
Ethernut / egnite GmbH · Nut/Net TCP/IP Stack
High7.5
CVE-2026-120458
Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser
Ultra Video Group · Kvazaar
Medium6.8
CVE-2026-120251
imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()
cgohlke · imagecodecs
Medium6.8
CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
Red Hat · Red Hat Enterprise Linux 10
High7.5
CVE-2026-62250
LibreDWG: unbounded allocation in pre-R13 DWG entity decoding
LibreDWG · libredwg
Medium5.5
CVE-2026-119205
pypdf: Possible infinite loop when cloning dictionaries
py-pdf · pypdf
High7.1