CWE-833: Deadlock
Filter
The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.
What the weakness is: CWE-833 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-25 Forced Deadlock Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-833, as MITRE names them. Credits.
Ask an AI about CWE-833
Show the prompt
Explain CWE-833: Deadlock and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/833.html and https://cve.bz/cve/cwe/833?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.8CVE-2026-125220EPSS 0.1%
FFmpeg through 9.0.2 contains a deadlock vulnerability in mimic_decode_frame() in libavcodec/mimic.c that fails to report frame progress when init_get_bits8() fails. Attackers can supply a crafted file with an oversized Mimic intra frame f…
- 6.8CVE-2026-118052EPSS 0.1%
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arith…
- 6.9CVE-2026-105390EPSS 0.1%
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unres…
- 7.5CVE-2026-70186EPSS 1.0%
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2026-103558EPSS 1.0%
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- 6.5CVE-2026-105792EPSS 0.7%
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.p…
- 6.5CVE-2026-77798EPSS 0.2%
Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module.
- 7.5CVE-2026-46352EPSS 0.5%
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing f…
- 7.1CVE-2026-70616EPSS 0.3%
boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, goroutines, and memory by sending requests to the GET /loading endpoint with attacke…
- 5.3CVE-2026-10647EPSS 0.2%
The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send(). When the enqueue fails, the function still calls k_sem_take(&data->s…
- 5.5CVE-2026-47334EPSS 0.08%
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock.
- 7.5CVE-2026-44579EPSS 0.7%
Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through craf…
- 7.5CVE-2026-43253EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause soft lockups under stressed environment, as wait_on_sem() …
- 6.5CVE-2026-33904EPSS 0.2%
Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 i…
- 7.5CVE-2024-48077EPSS 0.3%
NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors (FDs). This exhaust…
- 8.7CVE-2025-10150EPSS 0.3%
Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31
- 7.5CVE-2025-59463EPSS 0.4%
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
- 7.5CVE-2025-54796EPSS 0.5%
Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks t…
- 7.1CVE-2025-8312EPSS 0.4%
Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in the scheduling service.This issue affects the following versi…
- 7.5CVE-2025-36010EPSS 0.3%
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock.
- 7.5CVE-2025-1713EPSS 0.9%
When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is un…
- 7.5CVE-2024-29172EPSS 0.5%
Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service.
- 6.5CVE-2025-21313EPSS 1.7%
Windows Security Account Manager (SAM) Denial of Service Vulnerability
- 5.9CVE-2024-8447EPSS 0.7%
A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application …
- 8.2CVE-2024-47506EPSS 0.3%
A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a large amount of traffic is processed by…
- 5.5CVE-2024-0641EPSS 0.2%
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.
- 5.5CVE-2024-0639EPSS 0.2%
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially cras…
- 5.3CVE-2023-42441EPSS 0.5%
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, locks of the type `@nonreentrant("")` or `@nonreentrant('')` do not produce reentrancy checks at run…
- 5.5CVE-2023-0160EPSS 0.3%
A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.
- 3.3CVE-2023-3436EPSS 0.2%
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
- 5.5CVE-2023-31084EPSS 0.4%
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_fr…
- 7.5CVE-2022-43767EPSS 0.7%
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4…
- 5.5CVE-2022-4269EPSS 0.2%
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA…
- 8.6CVE-2021-1622EPSS 1.0%
A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (D…