# CWE-1284.

Every Advisory and CVE whose sources give the weakness CWE-1284, newest first.

## Records, newest first (an older page)

- [NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service.](https://agentprime.io/advisories/CVE-2023-0194.md)
  `CVE-2023-0194` · CVE record: NVIDIA vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) · CVSS 2.0 Low · Not analysed yet · Published 1 Apr 2023 · Tags: CWE-1284
- [IPFS go-bitfield vulnerable to DoS via malformed size arguments](https://agentprime.io/advisories/GHSA-2h6c-j3gf-xp9r.md)
  `GHSA-2h6c-j3gf-xp9r`, `CVE-2023-23626`, `GO-2023-1558` · Go `github.com/ipfs/go-bitfield`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-754, CWE-1284
- [The geofencing kernel code does not verify the length of the input data.](https://agentprime.io/advisories/CVE-2022-48298.md)
  `CVE-2022-48298` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-1284
- [The geofencing kernel code has a vulnerability of not verifying the length of the input data.](https://agentprime.io/advisories/CVE-2022-48297.md)
  `CVE-2022-48297` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-1284
- [Android: In Condition of Condition.java, there is a possible way to grant notification access due…](https://agentprime.io/advisories/CVE-2022-20493.md)
  `CVE-2022-20493` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2023 · Tags: CWE-1284
- [OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.](https://agentprime.io/advisories/CVE-2022-37312.md)
  `CVE-2022-37312` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-1284
- [OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.](https://agentprime.io/advisories/CVE-2022-37311.md)
  `CVE-2022-37311` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-1284
- [In multiple locations, there is a possible display crash loop due to improper input validation.](https://agentprime.io/advisories/CVE-2022-20543.md)
  `CVE-2022-20543` · CVE record: Android · CVSS 2.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-1284
- [demon image annotation <= 5.0 - Improper Input Restriction Validation](https://agentprime.io/advisories/CVE-2022-4171.md)
  `CVE-2022-4171` · CVE record: demonisblack demon image annotation · CVSS 6.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [Affected devices do not check the TFTP blocksize correctly.](https://agentprime.io/advisories/CVE-2022-46143.md)
  `CVE-2022-46143` · CVE record: Siemens RUGGEDCOM RM1224 LTE(4G) EU and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [Android: In NotificationChannel of NotificationChannel.java…](https://agentprime.io/advisories/CVE-2022-20491.md)
  `CVE-2022-20491` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [Android: In NotificationChannel of NotificationChannel.java…](https://agentprime.io/advisories/CVE-2022-20488.md)
  `CVE-2022-20488` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.](https://agentprime.io/advisories/CVE-2021-44693.md)
  `CVE-2021-44693` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [Android: In findAllDeAccounts of AccountsDb.java…](https://agentprime.io/advisories/CVE-2021-0934.md)
  `CVE-2021-0934` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1284
- [ToolJet is vulnerable to Denial of Service (DoS)](https://agentprime.io/advisories/GHSA-hgp8-w8fj-r4cm.md)
  `GHSA-hgp8-w8fj-r4cm`, `CVE-2022-4111` · npm `tooljet`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Nov 2022 · Tags: Denial of service, CWE-1284
- [\`tf.raw_ops.Mfcc\` crashes](https://agentprime.io/advisories/GHSA-rmg2-f698-wq35.md)
  `GHSA-rmg2-f698-wq35`, `BIT-tensorflow-2022-41896`, `CVE-2022-41896`, `PYSEC-2026-1035`, `PYSEC-2026-3239`, `PYSEC-2026-3369` · PyPI `tensorflow` and 2 more: affected `<2.8.4 || >=2.9.0, <2.9.3 || >=2.10.0, <2.10.1`, fixed in `2.8.4`, `2.9.3`, `2.10.1` · CVSS 4.8 Medium · Not analysed yet · Published 21 Nov 2022 · Tags: CWE-20, CWE-1284
- [Qualcomm, Inc. Snapdragon Consumer IOT…: Memory Corruption in modem due to improper length check while copying into memory in…](https://agentprime.io/advisories/CVE-2022-25727.md)
  `CVE-2022-25727` · CVE record: Qualcomm, Inc. Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Nov 2022 · Tags: CWE-1284
- [Intel(R) PROSet/Wireless WiFi…: Improper input validation for some Intel(R) PROSet/Wireless WiFi…](https://agentprime.io/advisories/CVE-2022-26047.md)
  `CVE-2022-26047` · CVE record: Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products · CVSS 4.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-1284
- [Android: In process_service_search_rsp of sdp_discovery.cc…](https://agentprime.io/advisories/CVE-2022-20445.md)
  `CVE-2022-20445` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 8 Nov 2022 · Tags: CWE-1284
- [Improper use of metav1.Duration allows for Denial of Service](https://agentprime.io/advisories/GHSA-f4p5-x4vc-mh4v.md)
  `GHSA-f4p5-x4vc-mh4v`, `BIT-flux-2022-39272`, `BIT-kustomize-2022-39272`, `CVE-2022-39272`, `GO-2022-1071` · Go `github.com/fluxcd/flux2` and 12 more: affected `>=0.1.0, <0.35.0`, fixed in `0.35.0` · CVSS 5.0 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-20, CWE-1284
- [parse-server crashes when receiving file download request with invalid byte range](https://agentprime.io/advisories/GHSA-h423-w6qv-2wj3.md)
  `GHSA-h423-w6qv-2wj3`, `BIT-parse-2022-39313`, `CVE-2022-39313` · npm `parse-server`: affected `<4.10.17 || >=5.0.0, <5.2.8`, fixed in `4.10.17`, `5.2.8` · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20, CWE-1284
- [GitLab: A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all…](https://agentprime.io/advisories/CVE-2022-2592.md)
  `CVE-2022-2592` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-1284
- [$\_COOKIE names string replacement (. -> \_): cookie integrity vulnerabilities](https://agentprime.io/advisories/CVE-2022-31629.md)
  `CVE-2022-31629` · CVE record: PHP Group PHP · CVSS 6.5 Medium · EPSS 0.50 · Not analysed yet · Published 28 Sept 2022 · Tags: CWE-20, CWE-1284
- [A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-serv…](https://agentprime.io/advisories/CVE-2022-2277.md)
  `CVE-2022-2277` · CVE record: Hitachi Energy MicroSCADA X SYS600 · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2022 · Tags: CWE-1284
- [NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to c…](https://agentprime.io/advisories/CVE-2022-28199.md)
  `CVE-2022-28199` · CVE record: NVIDIA NVIDIA FLARE · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2022 · Tags: CWE-1284
- [Improper Validation of Specified Quantity in Input in vim/vim](https://agentprime.io/advisories/CVE-2022-2845.md)
  `CVE-2022-2845` · CVE record: vim vim/vim · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2022 · Tags: CWE-1284
- [Denial of service in \`tf.ragged.constant\` due to lack of validation](https://agentprime.io/advisories/GHSA-cwpm-f78v-7m5c.md)
  `GHSA-cwpm-f78v-7m5c`, `BIT-tensorflow-2022-29202`, `CVE-2022-29202`, `PYSEC-2026-3163`, `PYSEC-2026-3312`, `PYSEC-2026-983` · PyPI `tensorflow` and 2 more: affected `<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1`, fixed in `2.6.4`, `2.7.2`, `2.8.1` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Denial of service, CWE-20, CWE-1284
- [Missing validation causes denial of service via \`LSTMBlockCell\`](https://agentprime.io/advisories/GHSA-2vv3-56qg-g2cf.md)
  `GHSA-2vv3-56qg-g2cf`, `BIT-tensorflow-2022-29200`, `CVE-2022-29200`, `PYSEC-2026-3089`, `PYSEC-2026-3267`, `PYSEC-2026-944` · PyPI `tensorflow` and 2 more: affected `<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1`, fixed in `2.6.4`, `2.7.2`, `2.8.1` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-20, CWE-1284
- [Missing validation causes denial of service via \`Conv3DBackpropFilterV2\`](https://agentprime.io/advisories/GHSA-5v77-j66x-4c4g.md)
  `GHSA-5v77-j66x-4c4g`, `BIT-tensorflow-2022-29196`, `CVE-2022-29196`, `PYSEC-2026-3110`, `PYSEC-2026-3278`, `PYSEC-2026-953` · PyPI `tensorflow` and 2 more: affected `<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1`, fixed in `2.6.4`, `2.7.2`, `2.8.1` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-20, CWE-1284
- [OpenStack Keystone Denial of Service vulnerability via a large HTTP request](https://agentprime.io/advisories/GHSA-4ppj-4p4v-jf4p.md)
  `GHSA-4ppj-4p4v-jf4p`, `CVE-2013-0270`, `PYSEC-2026-650` · PyPI `keystone`: affected `<8.0.0a0`, fixed in `8.0.0a0` · CVSS 6.5 Medium · Not analysed yet · Published 5 May 2022 · Tags: Memory corruption, CWE-1284
- [Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series](https://agentprime.io/advisories/CVE-2022-28613.md)
  `CVE-2022-28613` · CVE record: Hitachi Energy RTU500 series CMU Firmware · CVSS 7.5 High · Not analysed yet · Published 2 May 2022 · Tags: CWE-1284
- [Improper regex in htaccess file](https://agentprime.io/advisories/GHSA-mj6m-246h-9w56.md)
  `GHSA-mj6m-246h-9w56`, `CVE-2022-25769`, `PKSA-hj5d-wswk-kw69` · Packagist `mautic/core`: affected `<3.3.5 || >=4.0.0, <4.2.0`, fixed in `3.3.5`, `4.2.0` · CVSS 7.2 High · Not analysed yet · Published 1 Mar 2022 · Tags: CWE-1284
- [Unauthenticated control plane denial of service attack in Istio](https://agentprime.io/advisories/GHSA-856q-xv3c-7f2f.md)
  `GHSA-856q-xv3c-7f2f`, `CVE-2022-23635` · Go `istio.io/istio`: affected `<1.11.7 || >=1.12.0, <1.12.4 || >=1.13.0, <1.13.1`, fixed in `1.11.7`, `1.12.4`, `1.13.1` · CVSS 7.5 High · Not analysed yet · Published 23 Feb 2022 · Tags: Authentication bypass, CWE-1284
- [Microweber vulnerable to Improper Validation of Specified Quantity in Input](https://agentprime.io/advisories/GHSA-vpq7-m4qm-p2gp.md)
  `GHSA-vpq7-m4qm-p2gp`, `CVE-2022-0596`, `PKSA-bp72-nywy-xn14` · Packagist `microweber/microweber`: affected `<1.2.11`, fixed in `1.2.11` · CVSS 5.4 Medium · Not analysed yet · Published 16 Feb 2022 · Tags: CWE-1284
- [Improper Validation of Specified Quantity in Input in Eclipse Hono](https://agentprime.io/advisories/GHSA-9f52-hpvw-v96w.md)
  `GHSA-9f52-hpvw-v96w`, `CVE-2020-27217` · Maven `org.eclipse.hono:hono-core`: affected `<1.4.3`, fixed in `1.4.3` · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2022 · Tags: CWE-1284
- [Abort caused by allocating a vector that is too large in Tensorflow](https://agentprime.io/advisories/GHSA-627q-g293-49q7.md)
  `GHSA-627q-g293-49q7`, `BIT-tensorflow-2022-23580`, `CVE-2022-23580`, `PYSEC-2022-144`, `PYSEC-2022-89`, `PYSEC-2026-3113` · PyPI `tensorflow` and 2 more: affected `<2.5.3 || >=2.6.0, <2.6.3 || >=2.7.0, <2.7.1`, fixed in `2.5.3`, `2.6.3`, `2.7.1` · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2022 · Tags: Denial of service, CWE-1284
- [Dolibarr vulnerable to Improper Validation of Specified Quantity in Input](https://agentprime.io/advisories/GHSA-f768-8pvq-mm6r.md)
  `GHSA-f768-8pvq-mm6r`, `BIT-dolibarr-2022-0414`, `CVE-2022-0414`, `PKSA-8bmy-9syy-8jvn` · Packagist `dolibarr/dolibarr`: affected `<15.0`, fixed in `15.0` · CVSS 4.1 Medium · Not analysed yet · Published 1 Feb 2022 · Tags: CWE-1284
- [Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received](https://agentprime.io/advisories/CVE-2022-22166.md)
  `CVE-2022-22166` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-1284
- [Logic error in dolibarr](https://agentprime.io/advisories/GHSA-8qvx-f5gf-g43v.md)
  `GHSA-8qvx-f5gf-g43v`, `BIT-dolibarr-2022-0174`, `CVE-2022-0174`, `PKSA-sc5b-g3wj-xw57` · Packagist `dolibarr/dolibarr`: affected `<15.0.0`, fixed in `15.0.0` · CVSS 4.3 Medium · Not analysed yet · Published 12 Jan 2022 · Tags: CWE-20, CWE-1284
- [Siemens Capital Embedded AR Classic 431-422: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…](https://agentprime.io/advisories/CVE-2021-31346.md)
  `CVE-2021-31346` · CVE record: Siemens Capital Embedded AR Classic 431-422 and 3 more · CVSS 8.2 High · Not analysed yet · Published 9 Nov 2021 · Tags: CWE-1284
- [Siemens Capital Embedded AR Classic 431-422: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…](https://agentprime.io/advisories/CVE-2021-31345.md)
  `CVE-2021-31345` · CVE record: Siemens Capital Embedded AR Classic 431-422 and 2 more · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2021 · Tags: CWE-1284
- [Transaction validity oversight in pallet-ethereum](https://agentprime.io/advisories/GHSA-hw4v-5x4h-c3xm.md)
  `GHSA-hw4v-5x4h-c3xm`, `CVE-2021-39193` · crates.io `pallet-ethereum`: affected `<=3.0.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2021 · Tags: CWE-20, CWE-1284
- [Incomplete validation in \`MaxPoolGrad\`](https://agentprime.io/advisories/GHSA-7ghq-fvr3-pj2x.md)
  `GHSA-7ghq-fvr3-pj2x`, `BIT-tensorflow-2021-37674`, `CVE-2021-37674`, `PYSEC-2021-296`, `PYSEC-2021-587`, `PYSEC-2021-785` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-20, CWE-1284
- [Missing validation in shape inference for \`Dequantize\`](https://agentprime.io/advisories/GHSA-qfpc-5pjr-mh26.md)
  `GHSA-qfpc-5pjr-mh26`, `BIT-tensorflow-2021-37677`, `CVE-2021-37677`, `PYSEC-2021-299`, `PYSEC-2021-590`, `PYSEC-2021-788` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-20, CWE-1284
- [Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite…](https://agentprime.io/advisories/CVE-2009-4488.md)
  `CVE-2009-4488` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 13 Jan 2010 · Tags: CWE-1284
- [src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to…](https://agentprime.io/advisories/CVE-2008-2374.md)
  `CVE-2008-2374` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2008 · Tags: CWE-1284

Newest: <https://agentprime.io/advisories/tag/cwe-1284.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1284&cursor=WyIyMDIzLTA0LTAxVDA0OjU1OjA4Ljk1NjAwMFoiLCJDVkUtMjAyMy0wMTk1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1284/?cursor=WyIyMDIzLTA0LTAxVDA0OjU1OjA4Ljk1NjAwMFoiLCJDVkUtMjAyMy0wMTk1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.