The vulnerability involves an infinite loop caused by an unreachable exit condition. An attacker can trigger this loop, exhausting CPU and memory resources, which results in a denial of service. This flaw is categorized as CWE‑835, an infinite loop weakness.

The affected product is ix-ray engine 1.6, distributed as ixray-1.6-stcop by ixray-Team. Versions before 1.3 are impacted. No other versions have been identified as affected.

The base CVSS score is 7.5, indicating high severity. EPSS is less than 1%, suggesting low current exploitation likelihood, and the vulnerability is not listed in the CISA KEV catalog. The loop is likely triggered by normal execution of the engine, so an attacker could induce a denial of service by supplying heavy input or by simply letting the process run. No explicit remote network vector is disclosed; the issue appears to be local or privilege-based.