CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- tenable security centerImproper Access Control5.3 Medium
- rsyncproject rsyncrsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error6.9 Medium
- rrwo net::cidr::setNet::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths7.5 High
- samsung rlottieImproper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie...6.5 Medium
- samsung rlottieImproper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or...6.5 Medium
- openslideOpenSlide: Arbitrary memory write with crafted Ventana BIF file7.7 High
- gnu emacsHeap Use of Uninitialized Memory in GNU Emacs for Android5.3 Medium
- ocaml mirage-crypto-pkAn issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an...4.3 Medium
- hdfgroup hdf5HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read6.8 Medium
- hdfgroup hdf5Nbit filter NULL/short parameter-array dereference6.8 Medium
- @clerk nuxtNuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering7.5 High
- cisco catalyst sd-wan controller, catalyst sd-wan manager +1 moreCisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities7.7 High
- theotherphil imagecliimagecli - Negative carve Ratio Bypasses Bounds Check and Crashes Process via Reachable Panic7.5 High
- blackberry ltd qnx software development platformVulnerability in the QNX libtraceparser Impacts QNX Software Development Platform7.0 High
- erlang erts, otp, erlang\/otp +2 moreBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding8.2 High
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability7.5 High
- anh tran falcon – wordpress optimizations & tweaksWordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability7.5 High
- apache thriftApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass8.7 High
- nic knot resolverKnot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...8.1 High
- isc bind, bind 9 +1 moreCache poisoning possible with label count discrepancy, RRSIG, and wildcards7.5 High
- isc bind, bind 9 +1 moreKey Record using PRIVATEDNS algorithm may lead to unexpected exit6.5 Medium
- nlnet labs unboundRemote DNS-over-QUIC denial of service due to `quic-size` budget bypass7.5 High
- greyclab cimgCImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header7.5 High
- libgit2libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data7.5 High
- linux, linux kernel +1 morewifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap7.6 High
- zenhive mppMissing gas_limit validation in mpp Tempo fee-payer enables wallet drain8.2 High
- zenhive mppUnbounded access list in mpp Tempo fee-payer inflates gas cost per payment8.3 High
- zenhive mppUnbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain8.3 High
- pomeriumPomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback7.5 High
- wpdeveloper better payment – instant payments, donations, fundraising with subscriptions & moreWordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Specific traffic causes an FPC to reset7.1 High
- jetperch pymonocypherpymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small5.1 Medium
- lepture mistuneMistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content4.3 Medium
- immutable-js immutable, immutable-js +1 moreImmutable.js `List` 32-bit trie overflow → unrecoverable DoS8.7 High
- openbsd opensshinternal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...4.2 Medium
- fossbillingFOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment2.3 Low
- vllmvLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection7.5 High
- swooshEmail-derived URL path injection in the Swoosh Microsoft Graph adapter2.1 Low
- asus ai suite 3** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI...8.5 High
- asus ai suite 3** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI...7.3 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.3 server denial of service via malformed ClientHello pre-shared key extension8.2 High
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability9.0 Critical
- ibm db2IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user6.5 Medium
- cory marsh bitfire securityWordPress BitFire Security plugin <= 5.0.3 - Multiple Vulnerabilities vulnerability8.6 High
- devolutions serverImproper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0...2.7 Low
- gnupgCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...2.9 Low
- gnu libidnGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...4.0 Medium
craftcms/commercePackagistCraft Commerce: Partial Payment Amount Without Lower Bound Validation6.9 Mediumspomky-labs/otphpPackagistspomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation8.7 High- Show moreLoading…