Skip to content
OpenAdvisories

Weakness (CWE)

CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)

Base Incomplete

The product does not handle or incorrectly
handles a compressed input with a very high compression ratio
that produces a large output.

Source: MITRE CWE-409

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-85721 Public exploit

    AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, automatic response decompression on the HTTP/1.1 path uses ChannelManager.newHttpContentD…

    AsyncHttpClient async-http-client async-http-client async-http-client Debian Ubuntu Maven
  • High 7.5
    CVE-2026-49975 Public exploit EPSS 33%

    Apache HTTP Server: mod_http2 denial of service

    Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2025-63914 Public exploit

    An issue was discovered in Cinnamon kotaemon 0.11.0. The _may_extract_zip function in the \libs\ktem\ktem\index\file\ui…

  • High 7.5
    CVE-2024-12886 Public exploit

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present i…

    Ollama ollama/ollama github.com/ollama/ollama Go