CWE-1325 Improperly Controlled Sequential Memory Allocation
Description
The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1325 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-qhrr-8q5h-9q3h | CVE-2026-92707 | MODERATE |
MessagePack: Nested arrays can blow past buffer length limits |
2026-10-15 | |
| GHSA-86xp-94pg-8r6r | - | MODERATE |
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability |
2026-10-13 | |
| GHSA-2v8p-3f2j-5mp7 | CVE-2026-71436 | MODERATE |
Mermaid XY Charts are vulnerable to an infinite loop DoS |
2026-08-06 | |
| GHSA-f283-ghqc-fg79 | CVE-2026-67353 | MODERATE | - |
Guzzle: Unbounded response cookies risk denial of service |
2026-08-04 |
| GHSA-7c26-995w-6f47 | CVE-2026-54081 | MODERATE |
veraPDF Parser DoS via PostScript Type 1 Font Programs |
2026-07-29 | |
| GHSA-jrmc-qg6p-94fp | CVE-2026-54080 | MODERATE |
veraPDF Parser DoS via PostScript CMap Streams |
2026-07-29 | |
| GHSA-f5v8-v6q3-q4h6 | - | HIGH |
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) |
2026-04-16 | |
| GHSA-444m-px7r-qpvv | CVE-2026-24819 | MODERATE |
weixin4j has Improperly Controlled Sequential Memory Allocation |
2026-01-28 | |
| GHSA-gfh6-3pqw-x2j4 | CVE-2025-2240 | HIGH |
SmallRye Fault Tolerance out-of-memory (OOM) issue |
2025-05-21 |