CWE-1284: Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
247 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-9316 — N-central unauthenticated sessionID generation
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to pote
- CVE-2026-21485 — iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()
- CVE-2025-8320 — Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability
- CVE-2025-15080 — Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products
- CVE-2025-14869 — Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-8424 — Improper access control on the NetScaler Management Interface
- CVE-2025-61938 — BIG-IP Advanced WAF and ASM bd process vulnerability
- CVE-2025-5349 — NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
- CVE-2025-48507 — The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-sec
- CVE-2024-39697 — phonenumber panics on parsing crafted phonenumber inputs
- CVE-2026-81779 — WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability
- CVE-2026-49777 — WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
- CVE-2026-25345 — WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability
- CVE-2026-33471 — nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
- CVE-2026-1101 — Improper Validation of Specified Quantity in Input in GitLab
- CVE-2026-73194 — DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
- CVE-2026-57623 — WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability
- CVE-2026-27384 — WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability
- CVE-2025-33211 — NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified
Recently published
- CVE-2026-87735 — An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to pote
- CVE-2026-16025 — Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-85201 — In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-
- CVE-2026-82750 — Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
- CVE-2026-82751 — Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
- CVE-2026-82752 — Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length
- CVE-2026-53720 — pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
- CVE-2026-70409 — eldap does not bound the port component of a referral URL before integer conversion
- CVE-2026-70405 — snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields
- CVE-2026-59696 — uri_string does not bound the port component of a URI before integer conversion
- CVE-2026-71562 — httpc does not bound server-supplied numeric header values before integer conversion
- CVE-2026-82734 — Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal
- CVE-2026-82397 — Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
- CVE-2026-81779 — WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability
- CVE-2026-76763 — Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals
- CVE-2026-19873 — HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements
- CVE-2026-78010 — Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service
- CVE-2026-81851 — Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service
- CVE-2026-45201 — GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory
More specific weaknesses
- CWE-606 — Unchecked Input for Loop Condition