CWE-1050Excessive Platform Resource Consumption within a Loop

Abstraction: Base · CVEs in our corpus: 15

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Last updated: 22 August 2026 14:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 2 framework(s): STIG oracle linux 9 1 (partial) · STIG rhel 9 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.IR-04
SC-6 Resource Availability
SA-11 Developer Testing and Evaluation
PR.PS-06

Detect

Catch it (CSF Detect / Respond)

DE.CM-09

Harden

Shrink the surface (DISA STIG)

2 hardening rules · 2 OS baselines

Validate

Prove the fix (OWASP ASVS)

V2.4.1
V7.6.2
V15.4.3
V15.4.4

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2023-1390`	6.5	7.5	0.0510	2023-03-16
`CVE-2021-41039`	6.1	7.5	0.0126	2021-12-01
`CVE-2024-4068`	6.1	7.5	0.0147	2024-05-14
`CVE-2025-48866`	6.0	7.5	0.0079	2025-06-02
`CVE-2026-41292`	6.0	7.5	0.0072	2026-05-20
`CVE-2026-48779`	6.0	7.5	0.0081	2026-06-17
`CVE-2025-47947`	5.9	7.5	0.0060	2025-05-21
`CVE-2026-4634`	5.9	7.5	0.0052	2026-04-02
`CVE-2025-67419`	5.8	7.5	0.0030	2026-01-05
`CVE-2026-71488`	5.8	7.5	0.0035	2026-08-06
`CVE-2019-11254`	5.6	6.5	0.0307	2020-04-01
`CVE-2025-32907`	4.6	5.3	0.0066	2025-04-14
`CVE-2026-44390`	4.5	5.3	0.0063	2026-05-20
`CVE-2026-22263`	4.4	5.3	0.0040	2026-01-27
`CVE-2026-22261`	3.2	3.7	0.0031	2026-01-27