CWE-1286.

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

• Samsung Semiconductor Exynos 1080
• Samsung Semiconductor Exynos 2100
• CWE-1286

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

• Samsung Semiconductor Exynos 1080
• Samsung Semiconductor Exynos 9110
• CWE-1286

In neuropilot, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-1286

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

• WatchGuard Fireware OS
• Memory corruption
• CWE-248

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv

• CWE-1286

Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

• CWE-1286

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

• CWE-1286

>=0.6.0, <1.13.0 · fixed in 1.13.0

Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

• Juniper Networks Junos OS
• CWE-1286

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

• rabbitmq-server
• CWE-248
• CWE-1286

Windows Hyper-V Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1286

Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

• tink-crypto tink-go
• CWE-1286

Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input

• Barco ClickShare CX-20 Gen2
• CWE-20
• CWE-1286

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode

• Denial of service
• CWE-1286

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

• CWE-1286

Http4s: Set-Cookie rendering does not escape attribute delimiters

• http4s
• Other injection
• CWE-1286

Authentication bypass in Brainzcompany Zenius EMS 8.0

• Brainzcompany Zenius EMS 8.0
• Authentication bypass
• CWE-1286

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

• HTTP request smuggling
• CWE-1286

<2.11.57 · fixed in 2.11.57

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

• CWE-1286

<=0.6.0 · no fixed version yet

Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses

• mastodon
• Server-side request forgery (SSRF)
• CWE-1286

Denial-of-service vulnerability in M-Files Server

• M-Files Corporation M-Files Server
• CWE-1286

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

• Qualcomm, Inc. Snapdragon
• CWE-1286

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

• Server-side request forgery (SSRF)
• CWE-1286

>=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4 · fixed in 1.9.12, 1.10.11, 2.0.19, 2.1.15, 2.2.4

Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

• Juniper Networks Junos OS
• CWE-1286

guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts

• CWE-346
• CWE-1286

<7.12.1 · fixed in 7.12.1

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

• Denial of service
• CWE-1286

>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final · fixed in 4.2.15.Final, 4.1.135.Final

Arista EOS Dataplane Denial of Service via Malformed IPsec Packet

• Arista Networks EOS
• CWE-1286

Dräger SC Monitoring Devices DoS via Malformed Network Packet

• Dräger SC 6002XL
• Dräger SC6802XL
• CWE-1286

Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface

• Dräger Atlan A350
• CWE-1286

Dräger Perseus A500 2.00-2.02 DoS via Medibus Interface

• Dräger Perseus A500
• CWE-1286

Improper Validation of Syntactic Correctness of Input in Display

• Qualcomm, Inc. Snapdragon
• CWE-1286

Improper Validation of Syntactic Correctness of Input in Display

• Qualcomm, Inc. Snapdragon
• CWE-1286

Improper Validation of Syntactic Correctness of Input in Kernel

• Qualcomm, Inc. Snapdragon
• CWE-1286

Improper Validation of Syntactic Correctness of Input in Kernel

• Qualcomm, Inc. Snapdragon
• CWE-1286

XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py

• XX-Net
• CWE-1286

Keycloak: Denial of Service via specially crafted SAML input

• CWE-1286

<26.6.2 · fixed in 26.6.2

Denial of service vulnerability in M-Files Server

• M-Files Corporation M-Files Server
• CWE-1286

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

• Denial of service
• CWE-20

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Out-of-bounds read in Eclipse Foundation Eclipse OpenJ9

• Eclipse Foundation Eclipse OpenJ9
• Memory corruption
• CWE-1286

Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

• Snowflake Cortex Code CLI
• CWE-1286

Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass

• STIGTSP Net::CIDR::Lite
• CWE-1286

Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

• Juniper Networks Junos OS
• CWE-1286

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

• CWE-1286

>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6 · fixed in 3.1.21, 3.2.6

NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

• Memory corruption
• CWE-1286

* · no fixed version yet

Cisco IOS XE Software: A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software…

• Cisco IOS XE Software
• CWE-1286

NATS has pre-auth server panic via leafnode handling

• CWE-20
• CWE-1286

* · no fixed version yet

IBM QRadar SIEM Information Disclosure

• IBM QRadar
• CWE-1286

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1286

Incorrect parsing of IPv6 host literals in net/url

• CWE-1286

<1.25.8 || >=1.26.0-0, <1.26.1 · fixed in 1.25.8, 1.26.1

API - Insufficient Input Validation

• 2N Telekomunikace a.s. 2N Access Commander
• CWE-1286

uv has ZIP payload obfuscation through parsing differentials

• CWE-1286

<0.9.6 · fixed in 0.9.6

Microsoft Exchange Server Spoofing Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• CWE-345
• CWE-451

FacturaScripts has SQL Injection in API ORDER BY Clause

• SQL injection
• Other injection

<2025.81 · fixed in 2025.81

Malformed BRID/HHIT records can cause named to terminate unexpectedly

• ISC BIND 9
• Denial of service
• CWE-1286

Denial of Service condition in M-Files Server

• M-Files Corporation M-Files Server
• CWE-1286

Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash

• Juniper Networks Junos OS
• CWE-1286

Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration

• CWE-1286

<5.15 · fixed in 5.15

Duplicate Advisory: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict

• CWE-436
• CWE-1286

<7.0.7 · fixed in 7.0.7

Sauter: Improper Validation of user-controlled data

• Sauter modulo 6 devices modu680-AS
• Sauter modulo 6 devices modu660-AS
• CWE-1286

Web http client: Unchecked Server-Side Malicious Packet Issue

• Eclipse Foundation NetX Duo
• Memory corruption
• CWE-1286

Amazon.IonDotnet is vulnerable to Denial of Service attacks

• Denial of service
• CWE-1286

<1.3.2 · fixed in 1.3.2