CWE-835Base1 in KEV

Loop with Unreachable Exit Condition ('Infinite Loop')

Incomplete in the CWE catalog · 341 CVEs mapped

341
CVEs mapped
1
In KEV
6.9
Median CVSS
What it is

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Recent examples
5.5cvss
CVE-2026-6554

CVE-2026-6554 - MEDIUM Severity Vulnerability

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.

MEDIUMno explanation yet
0%
epss
none
CVE-2026-85730

CVE-2026-85730 - UNKNOWN Severity Vulnerability

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil() calls indexOfNewline(), receives -1 at the end of input, and resets the cursor to the beginning of the string instead of leaving the structure scan. The parser then hangs indefinitely and can consume a service's processing capacity when an application parses attacker-controlled TOML. This issue is fixed in version 1.7.1.

no explanation yet
0%
epss
5.3cvss
CVE-2026-78543

CVE-2026-78543 - MEDIUM Severity Vulnerability

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-835
Abstraction
Base
Structure
Simple
Status
Incomplete
References (1)