← Back
CWE-770

2,032 CVEs • Abstraction: Base • Likelihood of Exploit: High

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

JSON object

Loading...

CVEs (2,032)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14531
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 18, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
CVE-2017-0771
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37624243.
CVE-2017-6780
1Cisco
2Connected Grid Network Management System
Iot Field Network Director
May 13, 2026
Sep 7, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device...Show more
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP packets to a specific group of open listening ports on a targeted device. An exploit could allow the attacker to cause the system to consume additional memory. If enough available memory is consumed, the system will restart, creating a temporary denial of service (DoS) condition. The DoS condition will end after the device has finished the restart process. This vulnerability affects the following Cisco products: Connected Grid Network Management System, if running a software release prior to IoT-FND Release 4.0; IoT Field Network Director, if running a software release prior to IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164.Show less
CVE-2017-12693
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 1, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.
CVE-2017-12692
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 1, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.
CVE-2017-12691
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 1, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
CVE-2017-14107
2Debian
Libzip
2Debian Linux
Libzip
May 13, 2026
Sep 1, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a c...Show more
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.Show less
CVE-2017-13763
1Onosproject
1Onos
May 13, 2026
Aug 30, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.
CVE-2017-12875
1Imagemagick
1Imagemagick
May 13, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.
CVE-2017-13716
1Gnu
1Binutils
May 13, 2026
Aug 28, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted fi...Show more
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).Show less
CVE-2017-13133
1Imagemagick
1Imagemagick
May 13, 2026
Aug 23, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
CVE-2017-8253
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace.
CVE-2017-12944
1Libtiff
1Libtiff
May 13, 2026
Aug 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the...Show more
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.Show less
CVE-2017-0725
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.
CVE-2017-12643
2Debian
Imagemagick
2Debian Linux
Imagemagick
May 13, 2026
Aug 7, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.
CVE-2017-12563
1Imagemagick
1Imagemagick
May 13, 2026
Aug 5, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.
CVE-2017-12435
1Imagemagick
1Imagemagick
May 13, 2026
Aug 4, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service.
CVE-2017-12432
1Imagemagick
1Imagemagick
May 13, 2026
Aug 4, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.
CVE-2017-12430
1Imagemagick
1Imagemagick
May 13, 2026
Aug 4, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.
CVE-2017-12429
1Imagemagick
1Imagemagick
May 13, 2026
Aug 4, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.