Skip to content
OpenAdvisories

Weakness (CWE)

CWE-789: Memory Allocation with Excessive Size Value

Variant Draft

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

How to prevent it (2 mitigations)

  1. Implementation, Architecture and Design

    Perform adequate input validation against any value that influences the amount of memory that is allocated. Define an appropriate strategy for handling requests that exceed the limit, and consider supporting a configuration option so that the administrator can extend the amount of memory to be used if necessary.

  2. Operation

    Run your program using system-provided resource limits for memory. This might still cause the program to crash or exit, but the impact to the rest of the system will be minimized.

Source: MITRE CWE-789

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-55781 Public exploit

    NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

    NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's UFS and FFS image handler in NanaZip.Codecs.Archive.Ufs.cpp validates the superblock block size only against the MINBSIZE lower bound and does not valid…

    M2Team NanaZip
  • High 7.5
    CVE-2026-49975 Public exploit EPSS 33%

    Apache HTTP Server: mod_http2 denial of service

    Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-42154 Public exploit

    Prometheus: remote read endpoint allows denial of service via crafted snappy payload

    Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An…

    prometheus prometheus prometheus prometheus Debian Ubuntu Alpine Go
  • Medium 5.7
    CVE-2026-32941 Public exploit

    Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

    Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGRe…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.3
    CVE-2025-11579 Public exploit

    DoS via Out Of Memory Crash

    github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.

    nwaples rardecode github.com/nwaples/rardecode/v2 github.com/nwaples/rardecode Debian Ubuntu Go
  • Medium 6.9
    CVE-2025-27533 Public exploit

    Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

    Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of …

    Apache Software Foundation Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  • Unscored —
    CVE-2017-7651 Public exploit

    In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of co…

    The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu Alpine