CWE-1325

CWE-1325 · 5 records · 4 with a public proof-of-concept

Records the NVD classes under CWE-1325, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-109618public PoC2026-10-21

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su…

    php · ruggedcom ape1808 firmware · ruggedcom ape1808 · pan-os · panorama m-200 · panorama m-300

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.1CVE-2026-109619public PoC2026-10-21

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse…

    php · ruggedcom ape1808 firmware · ruggedcom ape1808 · pan-os · panorama m-200 · panorama m-300

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.5CVE-2026-18772public PoC2026-08-04

    Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.5CVE-2026-964212026-09-29

    USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 5.3CVE-2026-92707public PoC2026-10-15

    MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] f…

    AI risk analysis on Exploit-DB.ai →