CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreA vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreA vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA...5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's calendar name length not validated before writing to database3.5 Low
- google androidIn multiple locations, there is a possible display crash loop due to improper input validation....2.3 Low
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource...5.5 Medium
- tooljet, tooljet tooljet/tooljet +1 moreImproper Validation of Specified Quantity in Input in tooljet/tooljet6.5 Medium
- google tensorflow`tf.raw_ops.Mfcc` crashes in Tensorflow4.8 Medium
- freerdp, fedoraproject fedora +1 moreMissing input length validation in `drive` channel in FreeRDP4.6 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm ar8031 firmware, csra6620 firmware +19 more +21 moreMemory Corruption in modem due to improper length check while copying into memory in Snapdragon...9.8 Critical
- intel converged security and manageability engine, core i3-1000g1 firmware, core i3-1000g4 firmware +339 more +341 moreImproper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and...4.3 Medium
- facebook redexDexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of...9.8 Critical
- google androidIn process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to...7.5 High
- conduit-hyper project conduit-hyper(DoS) Denial of Service from unchecked request length in conduit-hyper7.5 High
- fluxcd flux2, helm-controller, image-automation-controller +4 more +6 moreFlux2 vulnerable to Denial of Service due to Improper use of metav1.Duration5.0 Medium
- parse-community parse-serverParse Server crashes when receiving file download request with invalid byte range7.5 High
- gitlabA lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior...6.5 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreUSBX Host CDC ECM integer underflow with buffer overflow7.6 High
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Medium
- samsung mtowerThe function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger...7.5 High
- hitachi energy microscada x sys600A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-servi…7.5 High
- rust-osdev linked-list-allocatorlinked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`8.4 High
- binary project binarySlice Memory Allocation with Excessive Size Value in binary8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +108 more +110 moreOut of bound write in DSP service due to improper bound check for response buffer size in...8.4 High
- google androida function called 'nla_parse', do not check the len of para, it will check nla_type (which can be...9.8 Critical
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/addRouting.7.5 High
- nvidia data plane development kit, flare +1 moreNVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...6.5 Medium
- node-opcua project node-opcuaDenial of Service (DoS)7.5 High
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When...9.8 Critical
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds...5.5 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreImproper Validation of Specified Quantity in Input in vim/vim7.8 High
- autodesk 3ds maxA Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to...7.8 High
- aescrypt aes crypt, paulej aescrypt +1 moreAES Crypt for Linux Password Security Vulnerability8.4 High
- nhi health insurance web service componentNHI’s health insurance web service component – Heap-based Buffer Overflow7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +94 more +96 moreLack of MBN header size verification against input buffer can lead to memory corruption in...8.4 High
- google tensorflowDenial of service in TensorFlow due to lack of validation in `tf.ragged.constant`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `LSTMBlockCell`5.5 Medium
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...4.7 Medium
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslog8.1 High
- abb rtu500 firmware, hitachi energy rtu500 series cmu firmware +1 moreSpecially Crafted Modbus TCP Packet Vulnerability in RTU500 series7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreBuffer overflow can occur due to improper validation of NDP application information length in...7.8 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft...9.8 Critical
- gitlabA potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all...4.3 Medium
- teluu pjsip, debian linux, pjsip pjproject +2 moreBuffer overflow in pjsip8.5 High
- Show moreLoading…