cve.bz

CWE-1389: Incorrect Parsing of Numbers with Different Radices

Filter

The product parses numeric input assuming base 10 (decimal) values, but it does not account for inputs that use a different base number (radix).

What the weakness is: CWE-1389 at MITRE. All weaknesses

Ask an AI about CWE-1389

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1389: Incorrect Parsing of Numbers with Different Radices and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1389.html and https://cve.bz/cve/cwe/1389?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.6CVE-2026-69257EPSS 0.4%

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSecurity.ts did not normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0.0.1 and ::ffff:169.25…

  2. 5.8CVE-2026-47160EPSS 0.3%

    Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png endpoint used src/http_client.rs checks including should_block_address() and post_resolve() that missed decimal, hexadeci…

  3. 8.6CVE-2026-50131EPSS 0.4%

    Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL validation before runtime document and media fet…

  4. 6.9CVE-2018-25242EPSS 0.2%

    One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 950 or more charac…

  5. 4.7CVE-2024-26015EPSS 0.5%

    An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version…

  6. 6.3CVE-2024-6284EPSS 0.3%

    In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:  https…