Skip to content
OpenAdvisories

Weakness (CWE)

CWE-835: Loop with Unreachable Exit Condition

Base Incomplete

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Source: MITRE CWE-835

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-78250 Public exploit

    bytebot-ai bytebot Agent Execution Workflow infinite loop

    A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly avail…

    bytebot-ai bytebot
  • Medium 5.1
    CVE-2026-24688 Public exploit

    pypdf has possible Infinite Loop when processing outlines/bookmarks

    pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has b…

    py-pdf pypdf pypdf pypdf Debian Ubuntu PyPI
  • Medium 5.1
    CVE-2024-44337 Public exploit

    Infinite loop in github.com/gomarkdown/markdown

    The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical…

    github.com/gomarkdown/markdown golang-github-gomarkdown-markdown golang-github-gomarkdown-markdown Debian Ubuntu Go
  • Medium 4.3
    CVE-2023-46442 Public exploit

    Soot Infinite Loop vulnerability

    An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS).

    org.soot-oss:soot Maven
  • Medium 5.5
    CVE-2018-12418 Public exploit

    Junrar vulnerable to Infinite Loop

    Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

    com.github.junrar:junrar Maven
  • Medium 5.5
    CVE-2018-1324 Public exploit

    Apache Commons Compress vulnerable to denial of service due to infinite loop

    A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack ag…

    Apache Software Foundation Apache Commons Compress org.apache.commons:commons-compress libcommons-compress-java Debian Ubuntu Maven