CWE-1325— Improperly Controlled Sequential Memory Allocation
The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.— MITRE CWE catalog
16 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-1325page 1 of 1
- CVE-2021-43174HIGHCVSS 7.5EG 7.52021-11-09
NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routi…
- CVE-2023-28968MEDIUMCVSS 5.3EG 5.32023-04-17
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-…
- CVE-2023-3341HIGHCVSS 7.5EG 7.52023-09-20
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause t…
- CVE-2023-52891MEDIUMCVSS 5.3EG 5.32024-07-09
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versio…
- CVE-2024-2511MEDIUMCVSS 5.9EG 5.92024-04-08
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that wou…
- CVE-2024-27796HIGHCVSS 7.8EG 8.12024-05-14
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
- CVE-2024-27804MEDIUMCVSS 5.5EG 8.12024-05-14
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be able to cause unexpected system termination.
- CVE-2025-13945MEDIUMCVSS 5.5EG 5.52025-12-03
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- CVE-2025-2240HIGHCVSS 7.5EG 7.52025-03-12
A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may le…
- CVE-2026-24819MEDIUMCVSS 6.3EG 6.32026-01-27
Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.…
- CVE-2026-34183HIGHCVSS 7.5EG 7.52026-06-09
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead …
- CVE-2026-6533MEDIUMCVSS 5.5EG 5.52026-04-30
Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
- CVE-2026-6535MEDIUMCVSS 5.5EG 5.52026-04-30
Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
- CVE-2026-6867MEDIUMCVSS 5.5EG 5.52026-04-30
SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
- CVE-2026-6869MEDIUMCVSS 5.5EG 5.52026-04-30
WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
- CVE-2026-8199MEDIUMCVSS 6.5EG 6.52026-05-13
An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. T…
Map vulnerabilities like CWE-1325 to your infrastructure
EchelonGraph correlates every CVE — across CWE-1325 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →