CWE-228
22 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 22Published CVEs22 of them scored
- 9Last 12 monthspublished in the last year
- 2Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107299
msgpack5: Reserved byte can cause unbounded stream buffering
mcollina · msgpack5
Medium5.9 - CVE-2026-87986
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot…
mistralai · mistral-vibe
Critical10.0 - CVE-2026-50103
Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850
MZ Automation · libIEC61850
High7.1 - CVE-2025-59174
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may…
Ericsson · Packet Core Controller
High7.1 - CVE-2026-25657
Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
Ericsson · Packet Core Gateway (PCG)
High7.1 - CVE-2026-42100
DoS in Sparx Pro Cloud Server
Sparx Systems · Pro Cloud Server
High7.1 - CVE-2026-34232
Firebird: DoS via `op_response` packet from client
FirebirdSQL · firebird
High7.5 - CVE-2024-53828
Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
Ericsson · Packet Core Controller (PCC)
Medium5.3 - CVE-2026-20125
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an…
Cisco · IOS
High7.7 - CVE-2025-2529
IBM Terracotta denial of service
IBM · Terracotta
Low2.9