CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

tinytag: Infinite loop when parsing certain M4A files containing invalid atoms

Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS

ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution

urllib3: Chunked Deflate streaming can enter an infinite loop

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

image-size: JXL and HEIF parsers allow denial of service through infinite loops

image-size: ICNS parser allows denial of service through an infinite loop

Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU

HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

smol-toml: Denial of Service via malformed TOML documents

Denial of Service in pyasn1 via Unbounded Recursion