CWE · MITRE source
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Last updated: 09 May 2026 03:25 UTC
NIST 800-53 r5 controls that address this weakness (2)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
CP-7 | Alternate Processing Site | CP | Enables transfer to alternate site if an infinite loop at the primary renders processing unavailable. |
SC-5 | Denial-of-service Protection | SC | Detects and mitigates infinite loops that produce sustained resource consumption. |
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2020-13935 | 7.0 | 7.5 | 0.9174 | 2020-07-14 |
CVE-2017-16944 | 6.1 | 7.5 | 0.7603 | 2017-11-25 |
CVE-2020-36227 | 5.6 | 7.5 | 0.6866 | 2021-01-26 |
CVE-2022-0711 | 5.5 | 7.5 | 0.6648 | 2022-03-02 |
CVE-2018-10546 | 5.4 | 7.5 | 0.6486 | 2018-04-29 |
CVE-2024-20353 KEV | 4.9 | 8.6 | 0.1954 | 2024-04-24 |
CVE-2023-1718 | 4.5 | 7.5 | 0.4967 | 2023-11-01 |
CVE-2024-50320 | 4.2 | 7.5 | 0.4438 | 2024-11-12 |
CVE-2011-1002 | 4.1 | 0.0 | 0.6813 | 2011-02-22 |
CVE-2019-14241 | 3.7 | 7.5 | 0.3704 | 2019-07-23 |
CVE-2021-4044 | 3.5 | 7.5 | 0.3328 | 2021-12-14 |
CVE-2017-16932 | 2.8 | 7.5 | 0.2199 | 2017-11-23 |
CVE-2018-1336 | 2.6 | 7.5 | 0.1855 | 2018-08-02 |
CVE-2017-6056 | 2.5 | 7.5 | 0.1593 | 2017-02-17 |
CVE-2022-46770 | 2.5 | 7.5 | 0.1691 | 2022-12-07 |
CVE-2018-1041 | 2.3 | 7.5 | 0.1413 | 2018-02-15 |
CVE-2021-40839 | 2.3 | 7.5 | 0.1384 | 2021-09-10 |
CVE-2023-34966 | 2.3 | 7.5 | 0.1356 | 2023-07-20 |
CVE-2023-45363 | 2.2 | 7.5 | 0.1103 | 2023-10-09 |
CVE-2017-6214 | 2.1 | 7.5 | 0.0946 | 2017-02-23 |
CVE-2017-15223 | 2.1 | 5.3 | 0.1718 | 2017-10-24 |
CVE-2018-8002 | 2.1 | 8.8 | 0.0558 | 2018-03-09 |
CVE-2019-19307 | 2.1 | 9.8 | 0.0296 | 2019-11-26 |
CVE-2016-4970 | 2.0 | 7.5 | 0.0823 | 2017-04-13 |
CVE-2017-12990 | 2.0 | 9.8 | 0.0112 | 2017-09-14 |