CVE-2025-66252

Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink operation is done in a while loop; if an immutable file is specified or otherwise a file in which the process has no permissions to delete; it would repeatedly attempt to do in a loop.

Scoring

Severity

HIGH

CVSS base score

8.4

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

EPSS probability

0.36%

CWE

CWE-835

Published

2025-11-26

Last modified

2026-03-13

Affected products

• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
• DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter

Weakness type

• CWE-835

Related vulnerabilities

• CVE-2026-88002 — Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
• CVE-2026-88000 — Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
• CVE-2026-87013 — Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
• CVE-2026-6554 — infinte loop in libpcap before 1.10.7
• CVE-2026-85730 — smol-toml: Denial of Service via malformed TOML documents
• CVE-2026-78543 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
• CVE-2026-84309 — pypdf: Possible infinite loop for TreeObject.insert_child
• CVE-2026-82605 — BareBones BBEdit Lasso Language Tokenizer infinite loop

Markdown version · Browse all CVEs