CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- unisoc (shanghai) technologies co., ltd. modemImproper Input Validation in Modem Firmware7.5 High
- google androidIn multiple locations, there is a possible way to trigger an out of bounds read and temporary...7.5 High
- google androidIn multiple locations, there is a possible way to trigger a temporary denial of service via an...7.5 High
- google androidIn FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication...2.7 Low
- google androidIn multiple locations, there is a possible denial of service due to a logic error in the code....6.2 Medium
- google androidIn __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due...6.2 Medium
- google androidIn multiple locations, there is a possible denial of service due to improper input validation....6.2 Medium
- google androidIn setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of...6.2 Medium
- google androidIn handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a...6.2 Medium
- google androidIn checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to...8.4 High
- google androidIn multiple locations, there is a possible denial of service due to improper input validation....7.5 High
- google androidIn updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue...6.2 Medium
- google androidIn parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input...7.5 High
- google androidIn multiple locations, there is a possible persistent denial of service due to improper input...6.2 Medium
- google androidIn multiple locations, there is a possible denial of service due to improper input validation....6.2 Medium
- google androidIn multiple functions of Helpers.java, there is a possible information disclosure due to improper...4.0 Medium
- google androidIn parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of...6.2 Medium
- google androidIn ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper...2.3 Low
- google androidIn aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper...6.2 Medium
- google androidIn ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry...6.7 Medium
- google androidIn loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper...6.2 Medium
- google androidIn setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there...8.4 High
- google androidIn multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due...7.8 High
- google androidIn onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label...8.4 High
- google androidIn multiple locations, there is a possible denial of service due to a missing permission check....6.2 Medium
- google androidIn writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission...8.4 High
adminneo-org/adminneoPackagistAdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers8.2 High- inex ixp-managerIXP Manager has authenticated non-administrator privilege escalation8.8 High
- libriscvlibriscv: Out of bounds read vuln in the ELF parser (Denial of service)7.9 High
- stirling-tools stirling-pdfStirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass5.3 Medium
- tesseract-ocr tesseractTesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service5.5 Medium
- openvm-org openvmOpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots8.7 High
- openvm-org openvmOpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments6.9 Medium
- axiom-crypto snark-verifierSNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements6.9 Medium
- axiom-crypto snark-verifierSNARK Verifier: noncanonical accumulator limb decoding6.9 Medium
- adminneo-org adminneoAdminNeo: version-cache array injection causes persistent denial of service7.5 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation...8.0 High
- drupal groupex pro ( daxko ) integrationGroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-2787.2 High
- google chromeImproper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a...8.8 High
- google chromeMemory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote...9.6 Critical
- mariadb-corporation mariadb-connector-jMariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths3.7 Low
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files5.9 Medium
- digitalbazaar forgeForge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption3.7 Low
cedar-policycrates.io,@cedar-policy/cedar-wasmnpm +1 moreCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence2.1 Low- progress software ws ftp serverPre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server7.5 High
- samsung mobile bixbyImproper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to...8.3 High
- apple swift-cryptoRed Hat Security Advisory: Red Hat Hardened Images RPMs Security Update5.9 Medium
- a2ui-project a2uia2ui Image Player/Video Player/Audio Player Image.js input validation5.3 Medium
- Show moreLoading…