CWE-130 — known CVE vulnerabilities

CVEs classified under CWE-130, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (50)

• CVE-2022-2714 — CVSS 9.8 (critical): Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.
• CVE-2026-18397: This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic…
• CVE-2026-9054: An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.
• CVE-2026-5706: In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and…
• CVE-2026-58096 — CVSS 8.8 (high): LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717…
• CVE-2022-1543 — CVSS 8.8 (high): Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service…
• CVE-2026-83745: Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and…
• CVE-2026-94633: Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart…
• CVE-2026-85494: Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with…
• CVE-2026-94635: Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift…
• CVE-2026-77619: Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame…
• CVE-2026-3868: An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper…
• CVE-2026-5367 — CVSS 8.6 (high): A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6)…
• CVE-2022-20870 — CVSS 8.6 (high): A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst…
• CVE-2024-38011 — CVSS 8.0 (high): Secure Boot Security Feature Bypass Vulnerability
• CVE-2024-38010 — CVSS 8.0 (high): Secure Boot Security Feature Bypass Vulnerability
• CVE-2024-37989 — CVSS 8.0 (high): Secure Boot Security Feature Bypass Vulnerability
• CVE-2024-37988 — CVSS 8.0 (high): Secure Boot Security Feature Bypass Vulnerability
• CVE-2025-10458 — CVSS 7.6 (high): Parameters are not validated or sanitized, and are later used in various internal operations.
• CVE-2026-87022 — CVSS 7.5 (high): Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when…
• CVE-2023-5778 — CVSS 7.5 (high): Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB…
• CVE-2026-73455 — CVSS 7.5 (high): On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause…
• CVE-2026-90678 — CVSS 7.5 (high): An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy…
• CVE-2026-81575 — CVSS 7.5 (high): If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data…
• CVE-2026-14587 — CVSS 7.5 (high): Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an…
• CVE-2026-54466 — CVSS 7.5 (high): websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket…
• CVE-2026-33846 — CVSS 7.5 (high): A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in…
• CVE-2026-31635 — CVSS 7.5 (high): In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized RESPONSE authenticator length check…
• CVE-2025-14847 — CVSS 7.5 (high) — actively exploited: Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client…
• CVE-2025-30659 — CVSS 7.5 (high): An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on…
• CVE-2024-53856 — CVSS 7.5 (high): rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data…
• CVE-2024-41990 — CVSS 7.5 (high): An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a…
• CVE-2024-39614 — CVSS 7.5 (high): An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential…
• CVE-2024-38875 — CVSS 7.5 (high): An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of…
• CVE-2023-33192 — CVSS 7.5 (high): ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the…
• CVE-2023-28964 — CVSS 7.5 (high): An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2022-41586 — CVSS 7.5 (high): The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may…
• CVE-2022-3290 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
• CVE-2022-3272 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
• CVE-2022-0677 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in…
• CVE-2021-43666 — CVSS 7.5 (high): A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's…
• CVE-2022-0618 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2…
• CVE-2022-24666 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2…
• CVE-2021-20610 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R…
• CVE-2021-36090 — CVSS 7.5 (high): When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of…
• CVE-2021-20588 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging…
• CVE-2019-0055 — CVSS 7.5 (high): A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS)…
• CVE-2026-41035 — CVSS 7.4 (high): In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free…
• CVE-2023-5393 — CVSS 7.4 (high): Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code…
• CVE-2024-35313 — CVSS 7.3 (high): In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 (with full vanguards), aka TROVE-2024-004.