Improper Validation of Specified Quantity in Input
CWE-1284
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
We track 203 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0. 2 have been exploited in real attacks.
Latest Improper Validation of Specified Quantity in Input vulnerabilities
- 7.5 High severity
CJ2M CPU Unit: Improper Validation of Specified Quantity in Input
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product
- 8.8 High severity
jcvi: Improper Validation of Specified Quantity in Input
jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics. A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may
- 7.5 High severity
Mongoose: Improper Validation of Specified Quantity in Input
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respon
- 7.5 High severity
Osticket: Improper Validation of Specified Quantity in Input
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is enter
- 8.8 High severity
Firefox: Improper Validation of Specified Quantity in Input
Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.
- 8.6 High severity
c-ares: Improper Validation of Specified Quantity in Input
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and
- 7.5 High severity
go-bitfield: Improper Validation of Specified Quantity in Input
go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. When feeding untrusted user input into the size parameter of `NewBitfield` and `FromBytes` functions, an attacker can trigger `panic`s. This ha
- 7.5 High severity
HarmonyOS: Improper Validation of Specified Quantity in Input
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
- 7.5 High severity
HarmonyOS: Improper Validation of Specified Quantity in Input
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
- 7.8 High severity
Android: Improper Validation of Specified Quantity in Input
In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
- 7.5 High severity
demon image annotation: Improper Validation of Specified Quantity in Input
The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a settin
- 7.8 High severity
Android: Improper Validation of Specified Quantity in Input
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not
- 7.8 High severity
Android: Improper Validation of Specified Quantity in Input
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not
- 8.8 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Improper Validation of Specified Quantity in Input
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These
- 8.8 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Improper Validation of Specified Quantity in Input
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These
- 7.5 High severity
tensorflow: Improper Validation of Specified Quantity in Input
TensorFlow is an open source platform for machine learning. If `ThreadUnsafeUnigramCandidateSampler` is given input `filterbank_channel_count` greater than the allowed max size, TensorFlow will crash. We have patched the issue in GitHub commit 39ec7eaf1428e90c
- 9.8 Critical severity
Snapdragon Consumer IOT, Snapdragon Industrial…: Improper Validation of Specified Quantity in Input
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- 9.8 Critical severity
Redex: Improper Validation of Specified Quantity in Input
DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.
- 7.5 High severity
Android: Improper Validation of Specified Quantity in Input
In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for expl
- 7.5 High severity
conduit-hyper: Improper Validation of Specified Quantity in Input
conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, `conduit-hyper` did not check any limit on a request's length before calling [`hyper::body::to_bytes`](https://docs.rs/hyper/latest/hyper/body/fn.to_bytes.html). An a
- 7.5 High severity
parse-server: Improper Validation of Specified Quantity in Input
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 4.10.17, and prior to 5.2.8 on the 5.x branch, crash when a file download request is received with an invalid byte range, resulting in a D
- 9.8 Critical severity
usbx: Improper Validation of Specified Quantity in Input
Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an intege
- 7.5 High severity
Mtower: Improper Validation of Specified Quantity in Input
The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.
- 7.5 High severity
MicroSCADA X SYS600: Improper Validation of Specified Quantity in Input
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too dis
- 9.8 Critical severity
Android: Improper Validation of Specified Quantity in Input
a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens.Product: AndroidVers
- 9.8 Critical severity
linked-list-allocator: Improper Validation of Specified Quantity in Input
linked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized wit
- 7.5 High severity
binary: Improper Validation of Specified Quantity in Input
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with (arbitrary) excessive size value, which can either exhaust available memory or crash th
- 8.6 High severity
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability…
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and
- 7.5 High severity
node-opcua: Improper Validation of Specified Quantity in Input
The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an u
- 9.8 Critical severity
Dir-816 Firmware: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tp_usrname, resulting in stack ove
- 7.8 High severity
Autodesk 3ds Max: Improper Validation of Specified Quantity in Input
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing Acti
- 7.8 High severity
Snapdragon Auto, Snapdragon Compute…: Improper Validation of Specified Quantity in Input
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V
- 8.1 High severity
rsyslog: Improper Validation of Specified Quantity in Input
Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability
- 7.5 High severity
RTU500 series CMU Firmware: Improper Validation of Specified Quantity in Input
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the
- 7.5 High severity
GitLab: Improper Validation of Specified Quantity in Input
A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to trigger high CPU usage via a special crafted input add
- 9.8 Critical severity
pjproject: Improper Validation of Specified Quantity in Input
PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials (credential
- 7.8 High severity
FRRouting: Improper Validation of Specified Quantity in Input
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c.
- 7.8 High severity
FRRouting: Improper Validation of Specified Quantity in Input
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c.
- 7.5 High severity
istio: Improper Validation of Specified Quantity in Input
Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in t
- 7.5 High severity
Popup | Custom Popup Builder: Improper Validation of Specified Quantity in Input
The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog