What CVEs are caused by CWE-1050?

11 recorded CVEs are attributed to CWE-1050, including CVE-2026-4634, CVE-2025-67419, CVE-2025-48866.

Is CWE-1050 actively exploited?

11 recorded CVEs are caused by CWE-1050; none are currently in CISA's KEV catalog of actively exploited flaws.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Base weakness

Incomplete

CWE-1050: Excessive Platform Resource Consumption within a Loop

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Last updated May 1, 2026

11

Recorded CVEs

With this primary weakness

0

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Base

Abstraction

MITRE classification

Overview

CWE-1050 (Excessive Platform Resource Consumption within a Loop) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.

Real-world CVEs

11 recorded CVEs are caused by CWE-1050 (Excessive Platform Resource Consumption within a Loop). The highest-severity and most recent are shown first. 4 new CWE-1050 CVEs have been recorded so far in 2026 (3 in 2025).

CVE-2025-47947

ModSecurity Has Possible DoS Vulnerability

High · CVSS 7.5 · EPSS 44th

2025-05-21

CVE-2024-4068

Memory Exhaustion in braces

High · CVSS 7.5 · EPSS 71th

2024-05-13

CVE-2023-1390

High · CVSS 7.5 · EPSS 91th

2023-03-16

CVE-2021-41039

High · CVSS 7.5 · EPSS 66th

2021-12-01

CVE-2019-11254

Medium · CVSS 6.5 · EPSS 82th

2020-04-01

CVE-2026-22263

Suricata http1: quadratic complexity in headers parsing over multiple packets

Medium · CVSS 5.3 · EPSS 32th

2026-01-27

CVE-2026-22261

Suricata eve/alert: http1 xff handling can lead to denial of service

Medium · CVSS 5.3 · EPSS 23th

2026-01-27

CVE-2025-32907

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Medium · CVSS 5.3 · EPSS 47th

2025-04-14

Common consequences

What can happen when CWE-1050 is exploited.

DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Reduce Performance

Affects: Availability

This issue can make the product perform more slowly. If an attacker can influence the number of iterations in the loop, then this performance problem might allow a denial of service by consuming more platform resources than intended.

How it happens

When it is introduced

Typically introduced during these phases of the software lifecycle.

Implementation

Terminology & mappings

Mapped taxonomies

OMG ASCPEM (ASCPEM-PRF-8)

Frequently asked questions

Common questions about CWE-1050.

What is CWE-1050?: The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
What CVEs are caused by CWE-1050?: 11 recorded CVEs are attributed to CWE-1050, including CVE-2026-4634, CVE-2025-67419, CVE-2025-48866.
What are the consequences of CWE-1050?: Exploiting CWE-1050 can lead to: DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Reduce Performance.
Is CWE-1050 actively exploited?: 11 recorded CVEs are caused by CWE-1050; none are currently in CISA's KEV catalog of actively exploited flaws.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-1050

Get alerted the moment a new CWE-1050 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing