cve.bz

CWE-1284: Improper Validation of Specified Quantity in Input, page 3

Filter

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

What the weakness is: CWE-1284 at MITRE

Ask an AI about CWE-1284

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-1284: Improper Validation of Specified Quantity in Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1284.html and https://cve.bz/cve/cwe/1284?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2026-19566EPSS 0.6%

    Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix length matching `(0|[1-9][0-9]*)` and passes it to _width2bits(), which…

  2. 6.5CVE-2026-19518EPSS 0.4%

    Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

  3. 6.5CVE-2026-19517EPSS 0.4%

    Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

  4. 5.3CVE-2026-71394EPSS 0.4%

    GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directo…

  5. 6.8CVE-2026-19028EPSS 0.2%

    H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowin…

  6. 6.8CVE-2026-19026EPSS 0.2%

    H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers…

  7. 7.5CVE-2026-71314EPSS 0.9%

    Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until M…

  8. 7.7CVE-2026-20313EPSS 0.4%

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that ad…

  9. 7.5CVE-2026-70378EPSS 0.3%

    imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast…

  10. 7.0CVE-2026-40272EPSS 0.2%

    Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in Q…

  11. 8.2CVE-2026-54890EPSS 0.4%

    Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emu…

  12. 7.5CVE-2026-59532EPSS 0.4%

    Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.

  13. 7.5CVE-2026-59531EPSS 0.5%

    Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.

  14. 8.7CVE-2026-58662EPSS 1.1%

    Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issu…

  15. 8.1CVE-2026-66374EPSS 0.6%

    Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

  16. 7.5CVE-2026-11721EPSS 0.4%

    It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the…

  17. 6.5CVE-2026-10822EPSS 0.4%

    If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify …

  18. 7.5CVE-2026-32665EPSS 0.3%

    In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (stream_id 0 and 4) bypass the per-stream 'quic-size' gate entirely, and …

  19. 7.5CVE-2026-47667EPSS 0.5%

    CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field is read as an `unsigned int` from the first 4 bytes of an Analyze/NIfTI file and passed directly to `new unsigned char[h…

  20. 7.6CVE-2026-63869EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap When parsing the radiotap header of an injected frame, ieee80211_parse_tx_radiotap() uses the…

  21. 8.3CVE-2026-59695EPSS 0.5%

    Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. When the mpp Elixir library is configured…

  22. 8.3CVE-2026-59694EPSS 0.5%

    Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, degrading the sponsor's operating margin. When the mpp Elixir…

  23. 8.2CVE-2026-59252EPSS 0.5%

    Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as f…

  24. 6.5CVE-2026-57364EPSS 0.4%

    Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More better-payment allows Accessing Functionality Not Properly Constrained …

  25. 8.7CVE-2026-57023EPSS 0.5%

    An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of…

  26. 7.1CVE-2026-57019EPSS 0.3%

    An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When a s…

  27. 4.3CVE-2026-59930EPSS 0.2%

    Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values without slugifying the heading text, allowing attacker-controlled…

  28. 8.7CVE-2026-59879EPSS 0.6%

    Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 …

  29. 5.4CVE-2026-59997EPSS 0.2%

    internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

  30. 2.3CVE-2026-43928EPSS 0.4%

    FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount (`mc_gross`) to the client's balance without …

  31. 7.5CVE-2026-54234EPSS 0.6%

    vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, a frontend-legal multi-request speculative decoding workload can cause the rejection sampler to produce a recovered token equal to the m…

  32. 7.3CVE-2022-4990EPSS 0.1%Unsupported when assigned

    Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation. Refer to th…

  33. 8.5CVE-2022-4989EPSS 0.1%Unsupported when assigned

    Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation. Refer to the 'End-of-Life Notice and Driv…

  34. 8.2CVE-2026-55952EPSS 0.5%

    The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3…

  35. 9.0CVE-2026-57623EPSS 0.5%

    Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.

  36. 6.5CVE-2026-11906EPSS 0.4%

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the dat…

  37. 8.6CVE-2026-56035EPSS 0.4%

    Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions.

  38. 6.5CVE-2026-54092EPSS 0.5%

    File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, unchecked passwords maximums allow for an arbitrarily large password to be passed int…

  39. 2.7CVE-2026-12755EPSS 0.4%

    Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to coerce server-side authentication to an attacker-controll…

  40. 2.9CVE-2026-57062EPSS 0.1%

    CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

  41. 2.5CVE-2026-57053EPSS 0.1%

    GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

  42. 3.7CVE-2026-53540EPSS 0.3%

    Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bound…

  43. 6.7CVE-2026-55392EPSS 0.2%

    NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined beh…

  44. 8.3CVE-2026-55706EPSS 0.4%

    sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

  45. 7.5CVE-2026-49110EPSS 0.2%

    Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions.

  46. 7.5CVE-2026-49078EPSS 0.3%

    Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions.

  47. 7.5CVE-2026-45441EPSS 0.3%

    Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

  48. 5.3CVE-2026-42657EPSS 0.2%

    Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.

  49. 8.7CVE-2026-12059EPSS 0.4%

    The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the original…

  50. 7.5CVE-2026-49218EPSS 0.3%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cau…