Cyber Resilience

CWE · MITRE source

CWE-1050Excessive Platform Resource Consumption within a Loop

Abstraction: Base · CVEs in our corpus: 14

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Last updated: 04 July 2026 11:13 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 8 mapping(s) from 4 framework(s): ATT&CK 3 (mostly) · ASVS 5.0 3 (partial) · STIG oracle linux 9 1 (partial) · STIG rhel 9 1 (partial)

See the full cumulative-coverage rollup →

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial).

T1499 Endpoint Denial of Service←M →MT1499.001 OS Exhaustion Flood←M →MT1499.003 Application Exhaustion Flood←M →M

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2021-410395.57.50.01262021-12-01
CVE-2023-13905.57.50.05102023-03-16
CVE-2024-40685.57.50.01472024-05-14
CVE-2025-47947 UPD5.57.50.00592025-05-21
CVE-2025-48866 UPD5.57.50.00762025-06-02
CVE-2025-674195.57.50.00292026-01-05
CVE-2026-4634 UPD5.57.50.00522026-04-02
CVE-2026-41292 UPD5.57.50.00562026-05-20
CVE-2026-48779 UPD5.57.50.00782026-06-17
CVE-2019-112543.56.50.02362020-04-01
CVE-2025-32907 UPD3.55.30.00572025-04-14
CVE-2026-222633.55.30.00402026-01-27
CVE-2026-44390 UPD3.55.30.00562026-05-20
CVE-2026-222611.53.70.00312026-01-27