CWE-1284.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service.

• vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows)
• CWE-1284

IPFS go-bitfield vulnerable to DoS via malformed size arguments

• CWE-754
• CWE-1284

<1.1.0 · fixed in 1.1.0

The geofencing kernel code does not verify the length of the input data.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-1284

The geofencing kernel code has a vulnerability of not verifying the length of the input data.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-1284

Android: In Condition of Condition.java, there is a possible way to grant notification access due…

• Android
• CWE-1284

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.

• CWE-1284

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.

• CWE-1284

In multiple locations, there is a possible display crash loop due to improper input validation.

• Android
• CWE-1284

demon image annotation <= 5.0 - Improper Input Restriction Validation

• demonisblack demon image annotation
• CWE-1284

Affected devices do not check the TFTP blocksize correctly.

• Siemens RUGGEDCOM RM1224 LTE(4G) EU
• Siemens RUGGEDCOM RM1224 LTE(4G) NAM
• CWE-1284

Android: In NotificationChannel of NotificationChannel.java…

• Android
• CWE-1284

Android: In NotificationChannel of NotificationChannel.java…

• Android
• CWE-1284

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• Siemens SIMATIC Drive Controller CPU 1504D TF
• Siemens SIMATIC Drive Controller CPU 1507D TF
• CWE-1284

Android: In findAllDeAccounts of AccountsDb.java…

• Android
• CWE-1284

ToolJet is vulnerable to Denial of Service (DoS)

• Denial of service
• CWE-1284

<1.27.0 · fixed in 1.27.0

`tf.raw_ops.Mfcc` crashes

• CWE-20
• CWE-1284

<2.8.4 || >=2.9.0, <2.9.3 || >=2.10.0, <2.10.1 · fixed in 2.8.4, 2.9.3, 2.10.1

Qualcomm, Inc. Snapdragon Consumer IOT…: Memory Corruption in modem due to improper length check while copying into memory in…

• Qualcomm, Inc. Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
• CWE-1284

Intel(R) PROSet/Wireless WiFi…: Improper input validation for some Intel(R) PROSet/Wireless WiFi…

• Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products
• CWE-1284

Android: In process_service_search_rsp of sdp_discovery.cc…

• Android
• CWE-1284

Improper use of metav1.Duration allows for Denial of Service

• CWE-20
• CWE-1284

>=0.1.0, <0.35.0 · fixed in 0.35.0

parse-server crashes when receiving file download request with invalid byte range

• CWE-20
• CWE-1284

<4.10.17 || >=5.0.0, <5.2.8 · fixed in 4.10.17, 5.2.8

GitLab: A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all…

• GitLab
• CWE-1284

$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

• PHP
• CWE-20
• CWE-1284

A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-serv…

• Hitachi Energy MicroSCADA X SYS600
• CWE-1284

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to c…

• NVIDIA FLARE
• CWE-1284

Improper Validation of Specified Quantity in Input in vim/vim

• vim/vim
• CWE-1284

Denial of service in `tf.ragged.constant` due to lack of validation

• Denial of service
• CWE-20

<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1 · fixed in 2.6.4, 2.7.2, 2.8.1

Missing validation causes denial of service via `LSTMBlockCell`

• CWE-20
• CWE-1284

<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1 · fixed in 2.6.4, 2.7.2, 2.8.1

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

• CWE-20
• CWE-1284

<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1 · fixed in 2.6.4, 2.7.2, 2.8.1

OpenStack Keystone Denial of Service vulnerability via a large HTTP request

• Memory corruption
• CWE-1284

<8.0.0a0 · fixed in 8.0.0a0

Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series

• Hitachi Energy RTU500 series CMU Firmware
• CWE-1284

Improper regex in htaccess file

• CWE-1284

<3.3.5 || >=4.0.0, <4.2.0 · fixed in 3.3.5, 4.2.0

Unauthenticated control plane denial of service attack in Istio

• Authentication bypass
• CWE-1284

<1.11.7 || >=1.12.0, <1.12.4 || >=1.13.0, <1.13.1 · fixed in 1.11.7, 1.12.4, 1.13.1

Microweber vulnerable to Improper Validation of Specified Quantity in Input

• CWE-1284

<1.2.11 · fixed in 1.2.11

Improper Validation of Specified Quantity in Input in Eclipse Hono

• CWE-1284

<1.4.3 · fixed in 1.4.3

Abort caused by allocating a vector that is too large in Tensorflow

• Denial of service
• CWE-1284

<2.5.3 || >=2.6.0, <2.6.3 || >=2.7.0, <2.7.1 · fixed in 2.5.3, 2.6.3, 2.7.1

Dolibarr vulnerable to Improper Validation of Specified Quantity in Input

• CWE-1284

<15.0 · fixed in 15.0

Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received

• Juniper Networks Junos OS
• CWE-1284

Logic error in dolibarr

• CWE-20
• CWE-1284

<15.0.0 · fixed in 15.0.0

Siemens Capital Embedded AR Classic 431-422: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

• Siemens Capital Embedded AR Classic 431-422
• Siemens Capital Embedded AR Classic R20-11
• CWE-1284

Siemens Capital Embedded AR Classic 431-422: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

• Siemens Capital Embedded AR Classic 431-422
• Siemens Capital Embedded AR Classic R20-11
• CWE-1284

Transaction validity oversight in pallet-ethereum

• CWE-20
• CWE-1284

<=3.0.0 · no fixed version yet

Incomplete validation in `MaxPoolGrad`

• CWE-20
• CWE-1284

<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1

Missing validation in shape inference for `Dequantize`

• CWE-20
• CWE-1284

<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite…

• CWE-1284

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to…

• CWE-1284