Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-789 (未经控制的内存分配) — Vulnerability Class 91

91 vulnerabilities classified as CWE-789 (未经控制的内存分配). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-8696 DoS attack against the Stork UI from an unauthenticated user — Stork 7.5 High2025-09-10
CVE-2025-23331 NVIDIA Triton Inference Server 安全漏洞 — Triton Inference Server 7.5 High2025-08-06
CVE-2025-54801 Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder — fiber 7.5AIHighAI2025-08-05
CVE-2025-2533 IBM Db2 for Linux denial of service — Db2 5.3 Medium2025-07-29
CVE-2025-4605 USD File Parsing Memory Allocation Vulnerability — USD for Maya 6.6 Medium2025-06-11
CVE-2025-2518 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 5.3 Medium2025-05-29
CVE-2025-3632 IBM 4769 Developers Toolkit denial of service — 4769 Developers Toolkit 7.5 High2025-05-12
CVE-2025-20140 Cisco IOS XE 安全漏洞 — Cisco IOS XE Software 7.4 High2025-05-07
CVE-2025-27533 Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation — Apache ActiveMQ 7.5AIHighAI2025-05-07
CVE-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination — helm 6.5 Medium2025-04-09
CVE-2025-30211 KEX init error results with excessive memory usage — otp 7.5 High2025-03-28
CVE-2025-26618 SSH SFTP packet size not verified properly in Erlang OTP — otp 5.9 -2025-02-20
CVE-2025-20165 Cisco BroadWorks SIP Denial of Service Vulnerability — Cisco BroadWorks 7.5 High2025-01-22
CVE-2024-52791 Denial of service through memory exhaustion in Matrix Media Repo — matrix-media-repo 5.3 Medium2025-01-16
CVE-2024-41762 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 5.3 Medium2024-12-07
CVE-2024-37071 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 5.3 Medium2024-12-07
CVE-2024-41761 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 5.3 Medium2024-11-23
CVE-2022-20845 Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability — Cisco IOS XR Software 6.0 Medium2024-11-15
CVE-2024-20260 Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software 8.6 High2024-10-23
CVE-2024-40680 IBM MQ denial of service — MQ 5.5 Medium2024-09-07
CVE-2024-37529 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 6.5 Medium2024-08-14
CVE-2024-35152 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows 6.5 Medium2024-08-14
CVE-2024-41132 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder — ImageSharp 5.3 Medium2024-07-22
CVE-2024-35116 IBM MQ denial of service — MQ 5.9 Medium2024-06-28
CVE-2024-37168 @grpc/grpc-js can allocate memory for incoming messages well above configured limits — grpc-node 5.3 Medium2024-06-10
CVE-2024-32035 Memory Allocation with Excessive Size Value in SixLabors.ImageSharp — ImageSharp 5.3 Medium2024-04-15
CVE-2024-2494 Libvirt: negative g_new0 length can lead to unbounded memory allocation 6.2 Medium2024-03-21
CVE-2023-3171 Eap-7: heap exhaustion via deserialization — EAP 7.4.13 7.5 High2023-12-27
CVE-2023-39203 Zoom Client 资源管理错误漏洞 — Zoom Rooms Client for Windows and Zoom VDI Client 4.3 Medium2023-11-14
CVE-2023-5371 Memory Allocation with Excessive Size Value in Wireshark — Wireshark 5.3 Medium2023-10-04

Vulnerabilities classified as CWE-789 (未经控制的内存分配) represent 91 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.