CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
baseThe product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (217)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-53633US | critical9.8 | — | ||
Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the size of the decoded content is not ch… | ||||
| CVE-2026-27809US | critical9.1 | — | ||
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data (e.g. a literal run… | ||||
| CVE-2026-21441US | high7.5 | — | ||
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than l… | ||||
| CVE-2022-29225US | high7.5 | — | ||
Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in th… | ||||
| CVE-2004-2647US | medium5.0 | Exploit | ||
Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from the same user. | ||||
| CVE-2026-111924US | high7.5 | — | ||
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers c… | ||||
| CVE-2026-109398US | high7.5 | — | ||
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* func… | ||||
| CVE-2026-109229US | high7.5 | — | ||
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNe… | ||||
| CVE-2026-109226US | high7.5 | — | ||
SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decode… | ||||
| CVE-2026-103262US | high7.5 | — | ||
Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a com… | ||||
| CVE-2026-86104US | high7.5 | — | ||
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a sp… | ||||
| CVE-2026-67232US | high7.5 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117 set compress => true, enabling R… | ||||
| CVE-2026-89059US | high7.5 | — | ||
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A… | ||||
| CVE-2026-92000US | high7.5 | — | ||
adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives wit… | ||||
| CVE-2026-82520US | high7.5 | — | ||
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes inco… | ||||
| CVE-2026-78206US | high7.5 | — | ||
exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly c… | ||||
| CVE-2026-68981US | high7.5 | — | ||
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum reque… | ||||
| CVE-2026-48586US | high7.5 | — | ||
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
This issue affects Apache Thrift: before… | ||||
| CVE-2026-41608US | high7.5 | — | ||
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recomm… | ||||
| CVE-2026-54314US | high7.5 | — | ||
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan