cve.bz

CWE-232: Improper Handling of Undefined Values

Filter

The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

What the weakness is: CWE-232 at MITRE. All weaknesses

Ask an AI about CWE-232

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-232: Improper Handling of Undefined Values and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/232.html and https://cve.bz/cve/cwe/232?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.6CVE-2026-92088EPSS 0.1%

    Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.

  2. 6.5CVE-2026-21689EPSS 0.3%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in …

  3. 6.7CVE-2025-20314EPSS 0.2%

    A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the …

  4. 7.5CVE-2025-40775EPSS 15%

    When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND…

  5. 7.7CVE-2025-20192EPSS 0.5%

    A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN crede…

  6. 7.5CVE-2023-39915EPSS 0.6%

    NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

  7. 7.5CVE-2023-39914EPSS 0.7%

    NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types…

  8. 6.5CVE-2023-36848EPSS 0.3%

    An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (PPMD) of Juniper Networks Junos OS on MX Series(except MPC10, MPC11 and LC9600) allows an unauthenticated adjacent attacker to cause a Denial …

  9. 7.5CVE-2023-2968EPSS 1.5%

    A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.

  10. 5.9CVE-2022-22213EPSS 0.7%

    A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specif…

  11. 4.6CVE-2021-3718EPSS 0.2%

    A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

  12. 5.3CVE-2021-34705EPSS 1.0%

    A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. Th…