# CWE-130.

Every Advisory and CVE whose sources give the weakness CWE-130, newest first.

## Records, newest first

- [MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets](https://agentprime.io/advisories/GHSA-h599-m3w5-9m7x.md)
  `GHSA-h599-m3w5-9m7x`, `CVE-2026-119276` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11`, fixed in `3.3.7`, `3.4.5`, `3.5.11` · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service, CWE-130
- [MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths](https://agentprime.io/advisories/GHSA-797x-p4mc-jwpm.md)
  `GHSA-797x-p4mc-jwpm`, `CVE-2026-119279` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.10`, fixed in `3.3.7`, `3.4.5`, `3.5.10` · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption, CWE-130
- [tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length](https://agentprime.io/advisories/CVE-2026-119600.md)
  `CVE-2026-119600` · CVE record: simsong tcpflow · CVSS 6.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-130
- [MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths](https://agentprime.io/advisories/CVE-2026-119277.md)
  `CVE-2026-119277` · CVE record: mariadb-corporation mariadb-connector-j · CVSS 5.9 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption, CWE-130
- [Alarm data length not validated against received frame length](https://agentprime.io/advisories/CVE-2026-115794.md)
  `CVE-2026-115794` · CVE record: RT-Labs P-Net · CVSS 2.3 Low · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-130
- [HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk](https://agentprime.io/advisories/CVE-2026-116531.md)
  `CVE-2026-116531` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-130
- [Improper handling of length parameter inconsistency in EPICS Base](https://agentprime.io/advisories/CVE-2026-114597.md)
  `CVE-2026-114597` · CVE record: The EPICS Community EPICS Base · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-130
- [OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing](https://agentprime.io/advisories/CVE-2026-116013.md)
  `CVE-2026-116013` · CVE record: openresty lua-resty-dns · CVSS 6.3 Medium · Not analysed yet · Published 24 Oct 2026 · Tags: CWE-130
- [NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire](https://agentprime.io/advisories/CVE-2026-114646.md)
  `CVE-2026-114646` · CVE record: MongoDB C# Driver · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-130
- [HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency](https://agentprime.io/advisories/CVE-2026-105960.md)
  `CVE-2026-105960` · CVE record: HMS Networks PEAK-System Device Driver Setup and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-130
- [IMAP APPEND plus CRLF conversion command injection](https://agentprime.io/advisories/CVE-2026-87864.md)
  `CVE-2026-87864` · CVE record: curl curl · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-130
- [In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address le…](https://agentprime.io/advisories/CVE-2026-110912.md)
  `CVE-2026-110912` · CVE record: DragonFlyBSD DragonFlyBSD · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used](https://agentprime.io/advisories/CVE-2026-101962.md)
  `CVE-2026-101962` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry](https://agentprime.io/advisories/CVE-2026-92159.md)
  `CVE-2026-92159` · CVE record: nasa fprime · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption, CWE-130
- [Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured](https://agentprime.io/advisories/CVE-2026-102054.md)
  `CVE-2026-102054` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used](https://agentprime.io/advisories/CVE-2026-101942.md)
  `CVE-2026-101942` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash](https://agentprime.io/advisories/CVE-2026-101994.md)
  `CVE-2026-101994` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled](https://agentprime.io/advisories/CVE-2026-101991.md)
  `CVE-2026-101991` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Maximo AI Service Denial of Service](https://agentprime.io/advisories/CVE-2026-90921.md)
  `CVE-2026-90921` · CVE record: IBM Maximo AI Service · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-130
- [AnyDesk: AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code…](https://agentprime.io/advisories/CVE-2026-109390.md)
  `CVE-2026-109390` · CVE record: AnyDesk AnyDesk · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-130
- [Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)](https://agentprime.io/advisories/CVE-2026-83745.md)
  `CVE-2026-83745` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pe…](https://agentprime.io/advisories/CVE-2026-85494.md)
  `CVE-2026-85494` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130, CWE-248, CWE-1188
- [Apache Thrift: Dart \`TBinaryProtocol.readMessageBegin\` allocates from the pre-versioned name length](https://agentprime.io/advisories/CVE-2026-94633.md)
  `CVE-2026-94633` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [Apache Thrift: Lua \`TBinaryProtocol:readMessageBegin\` bypasses \`checkStringSize\` on the pre-versioned name](https://agentprime.io/advisories/CVE-2026-94635.md)
  `CVE-2026-94635` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18397.md)
  `CVE-2026-18397` · CVE record: Thales SConnect · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Weak cryptography or TLS, Memory corruption, CWE-130, CWE-252
- [Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length](https://agentprime.io/advisories/CVE-2026-102718.md)
  `CVE-2026-102718` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-130
- [Apache Tomcat: WebSocket message smuggling with per-message-deflate](https://agentprime.io/advisories/CVE-2026-87022.md)
  `CVE-2026-87022` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-130
- [Vector: Unauthenticated denial of service in the \`logstash\` source via unbounded memory allocation.](https://agentprime.io/advisories/CVE-2026-77619.md)
  `CVE-2026-77619` · CVE record: vectordotdev vector · CVSS 8.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-130
- [Missing Length Check](https://agentprime.io/advisories/CVE-2023-5778.md)
  `CVE-2023-5778` · CVE record: ABB Freelance Controller DCP and 3 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-130
- [Security Advisory 0173](https://agentprime.io/advisories/CVE-2026-73455.md)
  `CVE-2026-73455` · CVE record: Arista Networks EOS · CVSS 8.9 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-130
- [An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5.](https://agentprime.io/advisories/CVE-2026-90678.md)
  `CVE-2026-90678` · CVE record: HAProxy HAProxy · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-130
- [CP210x Memory Leakage](https://agentprime.io/advisories/CVE-2026-15418.md)
  `CVE-2026-15418` · CVE record: Silicon Labs silabser.sys driver · CVSS 2.4 Low · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-130
- [Windows Storage Management Provider Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-71337.md)
  `CVE-2026-71337` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-130
- [Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements](https://agentprime.io/advisories/CVE-2026-5706.md)
  `CVE-2026-5706` · CVE record: Silicon Labs BT Mesh SDK · CVSS 8.9 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-130
- [wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length](https://agentprime.io/advisories/CVE-2026-71402.md)
  `CVE-2026-71402` · CVE record: SUSE wicked · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-130
- [Missing Sanity Checks for Buffer Lengths](https://agentprime.io/advisories/CVE-2026-81575.md)
  `CVE-2026-81575` · CVE record: wibu-systems-ag codemeter-runtime · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-130
- [ppp(8): missing length validation in mp_SetEnddisc()](https://agentprime.io/advisories/CVE-2026-58097.md)
  `CVE-2026-58097` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption, CWE-130
- [ppp(8): missing length validation in LcpDecodeConfig()](https://agentprime.io/advisories/CVE-2026-58096.md)
  `CVE-2026-58096` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption, CWE-130
- [Unathenticated connection can hold Bolt channel open](https://agentprime.io/advisories/CVE-2026-14587.md)
  `CVE-2026-14587` · CVE record: neo4j Enterprise Edition and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-130
- [FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure](https://agentprime.io/advisories/CVE-2026-67292.md)
  `CVE-2026-67292` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: CWE-130
- [buffer overruns in libfsimage iso9660 handling](https://agentprime.io/advisories/CVE-2026-62424.md)
  `CVE-2026-62424` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-130
- [buffer overruns in libfsimage iso9660 handling](https://agentprime.io/advisories/CVE-2026-62423.md)
  `CVE-2026-62423` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-130
- [HAProxy: HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the…](https://agentprime.io/advisories/CVE-2026-26081.md)
  `CVE-2026-26081` · CVE record: HAProxy HAProxy · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-130
- [TeraTerm Project TTSSH2: Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in…](https://agentprime.io/advisories/CVE-2026-60060.md)
  `CVE-2026-60060` · CVE record: TeraTerm Project TTSSH2 · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-130
- [websocket-driver: Message corruption via abuse of protocol length headers](https://agentprime.io/advisories/GHSA-xv26-6w52-cph6.md)
  `GHSA-xv26-6w52-cph6`, `CVE-2026-54466` · npm `websocket-driver`: affected `<0.7.5`, fixed in `0.7.5` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-130
- [Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream](https://agentprime.io/advisories/CVE-2026-47692.md)
  `CVE-2026-47692` · CVE record: envoyproxy envoy · CVSS 4.8 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-130
- [Improper bounds validation in EmberZNet SDK](https://agentprime.io/advisories/CVE-2026-6432.md)
  `CVE-2026-6432` · CVE record: Silicon Labs EmberZNet · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-130
- [zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet](https://agentprime.io/advisories/GHSA-qc2x-6f54-m6h9.md)
  `GHSA-qc2x-6f54-m6h9`, `CVE-2026-48487`, `PYSEC-2026-3438` · PyPI `zeroconf`: affected `<0.149.16`, fixed in `0.149.16` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-130
- [mouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in \`INTEGER_decode_oer\` via Malformed OER Payload](https://agentprime.io/advisories/CVE-2026-45615.md)
  `CVE-2026-45615` · CVE record: mouse07410 asn1c · CVSS 8.2 High · Not analysed yet · Published 29 May 2026 · Tags: Memory corruption, CWE-20, CWE-130
- [FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set.](https://agentprime.io/advisories/CVE-2026-48685.md)
  `CVE-2026-48685` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-130
- [Invalid IP packets cause a kernel panic](https://agentprime.io/advisories/CVE-2026-9054.md)
  `CVE-2026-9054` · CVE record: 9front 9front · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2026 · Tags: CWE-130
- [OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size](https://agentprime.io/advisories/GHSA-r6c9-g6q5-qrf9.md)
  `GHSA-r6c9-g6q5-qrf9`, `CVE-2026-45681`, `GO-2026-5610` · Go `go.opentelemetry.io/obi`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 5.9 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-130
- [OpenEXR: Out-of-bounds read in \`IDManifest::init()\` during prefix expansion](https://agentprime.io/advisories/CVE-2026-42216.md)
  `CVE-2026-42216` · CVE record: AcademySoftwareFoundation openexr · CVSS 8.8 High · Not analysed yet · Published 7 May 2026 · Tags: Memory corruption, CWE-130
- [dlm: validate length in dlm_search_rsb_tree](https://agentprime.io/advisories/CVE-2026-43125.md)
  `CVE-2026-43125` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Memory corruption, CWE-130
- [Django has an Improper Handling of Length Parameter Inconsistency](https://agentprime.io/advisories/GHSA-w26r-rmm8-9c29.md)
  `GHSA-w26r-rmm8-9c29`, `BIT-django-2026-5766`, `CVE-2026-5766`, `PYSEC-2026-54` · PyPI `django`: affected `>=5.2, <5.2.14 || >=6.0, <6.0.5`, fixed in `5.2.14`, `6.0.5` · CVSS 6.3 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-130
- [Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly](https://agentprime.io/advisories/CVE-2026-33846.md)
  `CVE-2026-33846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-130
- [Heap overflow in libnv](https://agentprime.io/advisories/CVE-2026-35547.md)
  `CVE-2026-35547` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption, CWE-130
- [An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router.](https://agentprime.io/advisories/CVE-2026-3868.md)
  `CVE-2026-3868` · CVE record: Moxa EDR-8010 Series and 1 more · CVSS 8.7 High · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-130
- [rxrpc: fix oversized RESPONSE authenticator length check](https://agentprime.io/advisories/CVE-2026-31635.md)
  `CVE-2026-31635` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130
- [Ovn: ovn: heap over-read in icmp error response generation](https://agentprime.io/advisories/CVE-2026-5265.md)
  `CVE-2026-5265` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130

Older: <https://agentprime.io/advisories/tag/cwe-130.md?cursor=WyIyMDI2LTA0LTI0VDEyOjI1OjA2LjgwODAwMFoiLCJDVkUtMjAyNi01MjY1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-130>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-130/>. Everything for agents: <https://agentprime.io/llms.txt>.