CWE · MITRE source
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Last updated: 15 October 2026 20:36 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
NIST 800-53 r5 controls PROPOSED for this weakness (2)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
CP-7 | Alternate Processing Site | CP | Enables transfer to alternate site if an infinite loop at the primary renders processing unavailable. |
SC-5 | Denial-of-service Protection | SC | Detects and mitigates infinite loops that produce sustained resource consumption. |
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2019-19307 UPD | 9.2 | 9.8 | 0.4225 | 2019-11-26 |
CVE-2024-20353 KEV UPD | 8.8 | 8.6 | 0.7069 | 2024-04-24 |
CVE-2014-0050 UPD | 8.4 | 7.5 | 0.8333 | 2014-04-01 |
CVE-2019-14241 UPD | 8.4 | 7.5 | 0.7024 | 2019-07-23 |
CVE-2020-13935 UPD | 8.4 | 7.5 | 0.8661 | 2020-07-14 |
CVE-2020-36227 UPD | 8.4 | 7.5 | 0.7724 | 2021-01-26 |
CVE-2022-0778 UPD | 8.4 | 7.5 | 0.7319 | 2022-03-15 |
CVE-2017-16944 UPD | 8.2 | 7.5 | 0.6336 | 2017-11-25 |
CVE-2023-34966 UPD | 8.2 | 7.5 | 0.6240 | 2023-07-20 |
CVE-2018-20784 UPD | 7.9 | 9.8 | 0.0417 | 2019-02-22 |
CVE-2020-7046 UPD | 7.9 | 7.5 | 0.5126 | 2020-02-12 |
CVE-2021-4044 UPD | 7.9 | 7.5 | 0.5010 | 2021-12-14 |
CVE-2022-23833 UPD | 7.9 | 7.5 | 0.4953 | 2022-02-03 |
CVE-2019-5097 UPD | 7.8 | 7.5 | 0.4506 | 2019-12-03 |
CVE-2017-12990 UPD | 7.7 | 9.8 | 0.0255 | 2017-09-14 |
CVE-2017-12995 UPD | 7.7 | 9.8 | 0.0241 | 2017-09-14 |
CVE-2017-12997 UPD | 7.7 | 9.8 | 0.0246 | 2017-09-14 |
CVE-2024-50320 | 7.6 | 7.5 | 0.3964 | 2024-11-12 |
CVE-2018-8002 UPD | 7.4 | 8.8 | 0.0801 | 2018-03-09 |
CVE-2024-36288 UPD | 7.4 | 9.8 | 0.0075 | 2024-06-21 |
CVE-2025-21850 UPD | 7.3 | 9.8 | 0.0042 | 2025-03-12 |
CVE-2017-15908 UPD | 7.2 | 7.5 | 0.2363 | 2017-10-26 |
CVE-2022-46770 UPD | 7.2 | 7.5 | 0.2243 | 2022-12-07 |
CVE-2023-45363 UPD | 7.2 | 7.5 | 0.2378 | 2023-10-09 |
CVE-2023-1718 UPD | 7.2 | 7.5 | 0.2408 | 2023-11-01 |