CWE-1284.

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…

• AMD Radeon™ RX 6000 Series Graphics Products
• AMD Radeon™ RX 7000 Series Graphics Products
• CWE-1284

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti…

• AMD Instinct™ MI300A
• AMD Instinct™ MI300X
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`

• Path traversal
• SQL injection

>=0.26.0, <0.28.17 · fixed in 0.28.17

oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

• CWE-20
• CWE-1284

<2.6.0 · fixed in 2.6.0

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

• CWE-1284

<4.12.18 · fixed in 4.12.18

Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncontrolled Resource Consumption

• Jules Colle Conditional Fields for Contact Form 7
• CWE-1284

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()

• Denial of service
• CWE-1284

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method

• Denial of service
• CWE-1284

IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations

• IBM Db2
• CWE-1284

Flaw in the updateUser Command May Allow Unauthorized Configuration Change

• MongoDB Server
• CWE-1284

IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index

• IBM Db2
• CWE-1284

rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length

• Memory corruption
• CWE-1284

>=0.9.0, <0.10.78 · fixed in 0.10.78

nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

• Memory corruption
• CWE-20

<1.7.2 · fixed in 1.7.2

Samsung Open Source ONE: Improper validation of STRING tensor offsets could allows malformed string metadata to…

• Samsung Open Source ONE
• CWE-1284

OpenBSD: In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they…

• OpenBSD
• CWE-1284

CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters the POST /logsetti…

• Schneider Electric PowerChute™ Serial Shutdown
• CWE-1284

Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850

• ABB AC800M (System 800xA)
• ABB Symphony Plus SD Series
• CWE-1284

nimiq-blockchain is missing a wall-clock upper bound on block timestamps

• CWE-20
• CWE-1284

<=1.3.0 · no fixed version yet

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`

• recipes
• Broken access control
• CWE-1284

vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

• Denial of service
• CWE-1284

>=0.1.0, <0.19.0 · fixed in 0.19.0

OpenEXR: integer overflow lead to OOB in HTJ2K decoder

• AcademySoftwareFoundation openexr
• Memory corruption
• CWE-1284

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.

• CWE-1284

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.

• CWE-20
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

• GalleryCreator SimpLy Gallery
• CWE-1284

Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parser

• CWE-1284

>=4.0.0-beta.3, <4.5.5 || >=5.0.0, <5.5.7 · fixed in 4.5.5, 5.5.7

Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service

• Elastic Kibana
• CWE-1284

HTSlib CRAM decoder vulnerable to buffer overflow

• samtools htslib
• Memory corruption
• CWE-1284

HTSlib BGZF index file reader has a heap buffer overflow

• samtools htslib
• Memory corruption
• CWE-1284

Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation

• CWE-248
• CWE-1284

<6.24.0 || >=7.0.0, <7.24.0 · fixed in 6.24.0, 7.24.0

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

• GStreamer
• Memory corruption
• CWE-1284

Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client

• CWE-248
• CWE-1284

>=6.0.0, <6.24.0 || >=7.0.0, <7.24.0 · fixed in 6.24.0, 7.24.0

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

• BoldGrid W3 Total Cache
• CWE-1284

jackson-core has Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion

• Denial of service
• CWE-1284

>=3.0.0, <3.1.0 · fixed in 3.1.0

Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes()

• LEONT Crypt::SysRandom::XS
• Memory corruption
• CWE-1284

Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service

• Elastic Kibana
• CWE-1284

Improper Validation of Specified Quantity in Input in GitLab

• GitLab
• CWE-1284

zlib: zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64…

• zlib
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom()

• DDICK Crypt::URandom
• Memory corruption
• CWE-1284

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.

• AMD EPYC™ 9005 Series Processors
• CWE-1284

Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 8004 Series Processors
• CWE-1284

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products

• Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU
• Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU
• CWE-1284

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

• IBM Cloud Pak for Business Automation
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

IBM Db2 Denial of Service

• IBM Db2 for Linux, UNIX and Windows
• CWE-1284

React Server Components have multiple Denial of Service Vulnerabilities

• Denial of service
• Insecure deserialization

>=19.0.0, <19.0.4 || >=19.1.0-canary-7130d0c6-20241212, <19.1.5 || >=19.2.0-canary-63779030-20250328, <19.2.4 · fixed in 19.0.4, 19.1.5, 19.2.4

Tanium addressed an improper input validation vulnerability in Discover.

• Tanium Discover
• CWE-1284

Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability

• Rockwell Automation CompactLogix® 5370
• CWE-1284

Sandboxie 5.49.7 - Denial of Service

• Sandboxie
• CWE-1284