CWE · MITRE source
CWE-834Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
If the iteration can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory. In many cases, a loop does not need to be infinite in order to cause enough resource consumption to adversely affect the product or its host system; it depends on the amount of resources consumed per iteration.
Last updated: 09 May 2026 03:25 UTC
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2020-14303 | 3.1 | 7.5 | 0.2636 | 2020-07-06 |
CVE-2017-12587 | 1.8 | 8.8 | 0.0008 | 2017-08-06 |
CVE-2023-26513 | 1.7 | 7.5 | 0.0304 | 2023-03-20 |
CVE-2017-11409 | 1.6 | 7.5 | 0.0119 | 2017-07-18 |
CVE-2018-14342 | 1.6 | 7.5 | 0.0134 | 2018-07-19 |
CVE-2019-3565 | 1.6 | 7.5 | 0.0195 | 2019-05-06 |
CVE-2020-35573 | 1.6 | 7.5 | 0.0171 | 2020-12-20 |
CVE-2021-3125 | 1.6 | 7.5 | 0.0094 | 2021-04-12 |
CVE-2021-3128 | 1.6 | 7.5 | 0.0248 | 2021-04-12 |
CVE-2021-35515 | 1.6 | 7.5 | 0.0119 | 2021-07-13 |
CVE-2021-39923 | 1.6 | 7.5 | 0.0225 | 2021-11-19 |
CVE-2021-39924 | 1.6 | 7.5 | 0.0134 | 2021-11-19 |
CVE-2017-11188 | 1.5 | 7.5 | 0.0012 | 2017-07-12 |
CVE-2018-7321 | 1.5 | 7.5 | 0.0043 | 2018-02-23 |
CVE-2018-7323 | 1.5 | 7.5 | 0.0054 | 2018-02-23 |
CVE-2018-9261 | 1.5 | 7.5 | 0.0072 | 2018-04-04 |
CVE-2018-11813 | 1.5 | 7.5 | 0.0028 | 2018-06-06 |
CVE-2019-3552 | 1.5 | 7.5 | 0.0038 | 2019-05-06 |
CVE-2019-3558 | 1.5 | 7.5 | 0.0073 | 2019-05-06 |
CVE-2019-3559 | 1.5 | 7.5 | 0.0053 | 2019-05-06 |
CVE-2019-3564 | 1.5 | 7.5 | 0.0053 | 2019-05-06 |
CVE-2021-23270 | 1.5 | 7.5 | 0.0033 | 2021-04-12 |
CVE-2021-39204 | 1.5 | 7.5 | 0.0041 | 2021-09-09 |
CVE-2021-4190 | 1.5 | 7.5 | 0.0012 | 2021-12-30 |
CVE-2021-4021 | 1.5 | 7.5 | 0.0044 | 2022-02-24 |