Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1176: Inefficient CPU Computation

Class Incomplete

The product performs CPU computations using
algorithms that are not as efficient as they could be for the
needs of the developer, i.e., the computations can be
optimized further.

Source: MITRE CWE-1176

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-45822

    decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

    decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens appro…

    SamVerschueren decode-uri-component decode-uri-component node-source-map-resolve Ubuntu npm
  • Medium 5.3
    GHSA-92vj-hp7m-gwcj

    Nerdbank.MessagePack has Inefficient CPU Computation

    ### Impact Applications that call `OptionalConverters.WithExpandoObjectConverter` and deserialize untrusted data are open to a vulnerability by which an attacker can exploit a `O(n²)` algorithm to burn an inordinate amount of CPU effort by adding a great many…

    Nerdbank.MessagePack NuGet
  • Medium 5.3
    CVE-2025-46153

    PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency wi…

    pytorch pytorch torch Debian Ubuntu PyPI
  • Medium 4.3
    CVE-2024-23323

    Excessive CPU usage when URI template matcher is configured using regex in Envoy

    Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers. This issue has been addressed in r…

    envoyproxy envoy