CWE · MITRE source
CWE-834Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
If the iteration can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory. In many cases, a loop does not need to be infinite in order to cause enough resource consumption to adversely affect the product or its host system; it depends on the amount of resources consumed per iteration.
Last updated: 14 October 2026 20:41 UTC
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2017-12587 UPD | 6.9 | 8.8 | 0.0203 | 2017-08-06 |
CVE-2021-35515 UPD | 6.8 | 7.5 | 0.1157 | 2021-07-13 |
CVE-2021-39924 UPD | 6.5 | 7.5 | 0.0529 | 2021-11-19 |
CVE-2018-14342 UPD | 6.4 | 7.5 | 0.0372 | 2018-07-19 |
CVE-2020-14303 UPD | 6.4 | 7.5 | 0.0354 | 2020-07-06 |
CVE-2018-7323 UPD | 6.3 | 7.5 | 0.0245 | 2018-02-23 |
CVE-2018-9261 UPD | 6.3 | 7.5 | 0.0284 | 2018-04-04 |
CVE-2018-11813 UPD | 6.3 | 7.5 | 0.0314 | 2018-06-06 |
CVE-2019-3565 UPD | 6.3 | 7.5 | 0.0281 | 2019-05-06 |
CVE-2020-35573 UPD | 6.3 | 7.5 | 0.0269 | 2020-12-20 |
CVE-2021-4190 UPD | 6.3 | 7.5 | 0.0310 | 2021-12-30 |
CVE-2017-11188 UPD | 6.2 | 7.5 | 0.0179 | 2017-07-12 |
CVE-2017-11409 UPD | 6.2 | 7.5 | 0.0226 | 2017-07-18 |
CVE-2018-7321 UPD | 6.2 | 7.5 | 0.0171 | 2018-02-23 |
CVE-2019-3552 UPD | 6.2 | 7.5 | 0.0198 | 2019-05-06 |
CVE-2019-3558 UPD | 6.2 | 7.5 | 0.0202 | 2019-05-06 |
CVE-2019-3559 UPD | 6.2 | 7.5 | 0.0199 | 2019-05-06 |
CVE-2019-3564 UPD | 6.2 | 7.5 | 0.0199 | 2019-05-06 |
CVE-2021-3128 UPD | 6.2 | 7.5 | 0.0218 | 2021-04-12 |
CVE-2021-39204 UPD | 6.2 | 7.5 | 0.0166 | 2021-09-09 |
CVE-2021-39923 UPD | 6.2 | 7.5 | 0.0158 | 2021-11-19 |
CVE-2021-3125 UPD | 6.1 | 7.5 | 0.0150 | 2021-04-12 |
CVE-2021-4021 UPD | 6.1 | 7.5 | 0.0107 | 2022-02-24 |
CVE-2023-26513 UPD | 6.1 | 7.5 | 0.0146 | 2023-03-20 |
CVE-2023-38200 UPD | 6.1 | 7.5 | 0.0145 | 2023-07-24 |