CWE-228: Improper Handling of Syntactically Invalid Structure
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- mcollina msgpack5 msgpack5: Reserved byte can cause unbounded stream buffering 5.9 Medium
- mistralai mistral-vibe An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command... 10.0 Critical
- ibm langflow oss, langflow +1 more Langflow is affected by weaknesses in secret handling and sensitive configuration access 7.4 High
- mz automation libiec61850 Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850 7.1 High
- ericsson packet core controller Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an... 7.1 High
- ericsson packet core gateway (pcg), packet core gateway +1 more Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability 7.1 High
- sparx systems pro cloud server DoS in Sparx Pro Cloud Server 7.1 High
- firebirdsql firebird Firebird: DoS via `op_response` packet from client 7.5 High
- ericsson packet core controller (pcc), packet core controller +1 more Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability 5.3 Medium
- cisco ios xe software, ios +1 more A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software... 7.7 High
- ibm terracotta IBM Terracotta denial of service 2.9 Low
-
github.com/cometbft/cometbftGo CometBFT's invalid BitArray handling can lead to network halt 8.7 High - gwenn libsql-sqlite3-parser libsql-sqlite3-parser crash due to invalid UTF-8 input 2.9 Low
- fortinet fortiweb An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7... 5.5 Medium
- fortinet fortiweb An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4... 5.5 Medium
- swift project asn1 CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER 7.5 High
- mongodb rust driver Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands. 6.4 Medium
- tormach pathpilot controller, pilotpath controller +1 more An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6... 5.3 Medium
- tormach pathpilot controller, pilotpath controller +1 more Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows... 6.5 Medium
- juniper junos os evolved Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE 7.5 High
- nlnet labs routinator Crashes on parsing certain invalid RPKI objects 7.5 High
- nlnet labs bcder BER/CER/DER decoder panics on invalid input 7.5 High
- eclipse cyclonedds Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure 6.6 Medium
- johnson controls videoedge VideoEdge 5.3 Medium
- linuxfoundation dex Authentication Bypass in dex 9.8 Critical
- dexidp dex Critical security issues in XML encoding in Dex 9.3 Critical
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 more The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in... 6.5 Medium