CWE-835— Loop with Unreachable Exit Condition (Infinite Loop)

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.— MITRE CWE catalog

1,062 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-835page 15 of 22

CVE-2018-18070MEDIUMCVSS 5.9EG 5.9
2018-10-09
An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the…
CVE-2018-10938MEDIUMCVSS 5.9EG 5.9
2018-08-27
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv…
CVE-2026-20019MEDIUMCVSS 5.8EG 5.8
2026-10-21
Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet i…
CVE-2026-20054MEDIUMCVSS 5.8EG 5.8
2026-03-04
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.  This vulnerability is due to improper error ch…
CVE-2017-17131MEDIUMCVSS 5.7EG 5.7
2018-03-05
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the param…
CVE-2017-9330MEDIUMCVSS 5.6EG 5.6
2017-06-08
QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-20…
CVE-2017-9310MEDIUMCVSS 5.6EG 5.6
2017-06-08
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head …
CVE-2024-11595MEDIUMCVSS 7.8EG 5.5
2024-11-21
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
CVE-2026-121944MEDIUMCVSS 5.5EG 5.5
2026-11-04
sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows attackers to cause denial of service via crafted NFLOG TLVs. Attackers can supply a pcap file with link type NFLOG conta…
CVE-2026-120458MEDIUMCVSS 5.5EG 5.5
2026-11-02
Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a…
CVE-2026-120251MEDIUMCVSS 5.5EG 5.5
2026-11-01
imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a crafted CCITT Group 4 stream. Attackers can provide an 8-byte G4 s…
CVE-2026-62250MEDIUMCVSS 5.5EG 5.5
2026-10-30
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_preR13_entities()` in `src/decode.c` enter a nonterminating loop that allocates a new object each iteration. `decode_preR1…
CVE-2026-119205MEDIUMCVSS 5.5EG 5.5
2026-10-29
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone traversal checked generated destination references rather than …
CVE-2026-119203MEDIUMCVSS 5.5EG 5.5
2026-10-29
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trail…
CVE-2026-113794MEDIUMCVSS 5.5EG 5.5
2026-10-21
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinit…
CVE-2026-112046MEDIUMCVSS 5.5EG 5.5
2026-10-18
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed cod…
CVE-2016-20099MEDIUMCVSS 5.5EG 5.5
2026-10-14
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, whi…
CVE-2026-88252MEDIUMCVSS 5.5EG 5.5
2026-10-06
A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connections). By opening and maintaining many concurrent connections …
CVE-2026-95386MEDIUMCVSS 5.5EG 5.5
2026-09-29
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
CVE-2026-96418MEDIUMCVSS 5.5EG 5.5
2026-09-29
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-81885MEDIUMCVSS 5.5EG 5.5
2026-09-22
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration lim…
CVE-2026-84309MEDIUMCVSS 5.5EG 5.5
2026-09-01
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/_data_structures.py TreeObject.insert_child to follow /Next links indefinitely when a wr…
CVE-2026-45271MEDIUMCVSS 5.5EG 5.5
2026-08-21
Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. Picotls implements its own ASN.1 validation helper, which is used by the minicrypto backend while parsing local PKCS#8 private ke…
CVE-2026-64409MEDIUMCVSS 5.5EG 5.5
2026-07-25
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Every once in a while we see a hung btmtksdio_flush() task: INFO: task kworker/u17:0:189 blocked for m…
CVE-2026-64369MEDIUMCVSS 5.5EG 5.5
2026-07-25
In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions whic…
CVE-2026-64290MEDIUMCVSS 5.5EG 5.5
2026-07-25
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner list_for_each_entry, only the inner loop breaks; the outer w…
CVE-2026-63908MEDIUMCVSS 5.5EG 5.5
2026-07-19
In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem When a configuration file provides an object size that is larger than the driver's known mxt_obj_size(obj…
CVE-2026-7771MEDIUMCVSS 5.5EG 5.5
2026-07-17
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.
CVE-2026-56289MEDIUMCVSS 5.5EG 5.5
2026-07-09
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the…
CVE-2026-53312MEDIUMCVSS 5.5EG 5.5
2026-06-26
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather->end of ULONG_MAX, but if this happens…
CVE-2026-52965MEDIUMCVSS 5.5EG 5.5
2026-06-24
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure When ttm_tt_swapout() fails, the current code calls ttm_resource_add_bulk_move() followed by ttm_resou…
CVE-2026-52921MEDIUMCVSS 5.5EG 5.5
2026-06-24
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges wi…
CVE-2026-54651MEDIUMCVSS 5.5EG 5.5
2026-06-22
pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulne…
CVE-2026-54531MEDIUMCVSS 5.5EG 5.5
2026-06-16
pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. This vulnerability…
CVE-2026-54530MEDIUMCVSS 5.5EG 5.5
2026-06-16
pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixe…
CVE-2026-49495MEDIUMCVSS 5.5EG 5.5
2026-06-10
Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the ex…
CVE-2026-46314MEDIUMCVSS 5.5EG 5.5
2026-06-08
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-provided singly-linked list of ioctl extensions without any bou…
CVE-2026-46146MEDIUMCVSS 5.5EG 5.5
2026-05-28
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its increment size of cs_desc->wLength, but we forgot to valid…
CVE-2026-45919MEDIUMCVSS 5.5EG 5.5
2026-05-27
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_next_cpu() CPU0 becomes overloaded when hosting a CPU-bound RT task, a non-CPU-bound RT task, and a CFS task stuck in kerne…
CVE-2026-45864MEDIUMCVSS 5.5EG 5.5
2026-05-27
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent infinite loops caused by the next valid being the same When processing valid within the range [valid : pos), if valid cannot be retrieved correctly, fo…
CVE-2026-46521MEDIUMCVSS 5.5EG 5.5
2026-05-18
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing chec…
CVE-2026-43486MEDIUMCVSS 5.5EG 5.5
2026-05-13
In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults contpte_ptep_set_access_flags() compared the gathered ptep_get() value against the requested entry…
CVE-2026-42310MEDIUMCVSS 5.5EG 5.5
2026-05-09
Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue ha…
CVE-2026-43096MEDIUMCVSS 5.5EG 5.5
2026-05-06
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests access memory regions without proper permissions. Currently, m…
CVE-2026-6536MEDIUMCVSS 5.5EG 5.5
2026-04-30
DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4
CVE-2026-6534MEDIUMCVSS 5.5EG 5.5
2026-04-30
USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6531MEDIUMCVSS 5.5EG 5.5
2026-04-30
SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6528MEDIUMCVSS 5.5EG 5.5
2026-04-30
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
CVE-2026-6523MEDIUMCVSS 5.5EG 5.5
2026-04-30
GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6522MEDIUMCVSS 5.5EG 5.5
2026-04-30
RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Map vulnerabilities like CWE-835 to your infrastructure

EchelonGraph correlates every CVE — across CWE-835 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →