CWE-130

144 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 8High 72Medium 60Low 3Not scored 1

CVEs per yearBy the year they were published

CVE-2025-14847
Zlib compressed protocol header length confusion may allow memory read
MongoDB Inc. · MongoDB Server
ExploitedHigh8.7

CVE-2026-119600
tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length
simsong · tcpflow
Medium6.3
CVE-2026-119279
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
mariadb-corporation · mariadb-connector-j
Medium5.9
CVE-2026-119277
MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths
mariadb-corporation · mariadb-connector-j
Medium5.9
CVE-2026-119276
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
mariadb-corporation · mariadb-connector-j
Medium5.9
CVE-2026-115794
Alarm data length not validated against received frame length
RT-Labs · P-Net
Low2.3
CVE-2026-116531
HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk
HTTP-Body
Not scored
CVE-2026-114597
Improper handling of length parameter inconsistency in EPICS Base
The EPICS Community · EPICS Base
High8.7
CVE-2026-116013
OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing
openresty · lua-resty-dns
Medium6.3
CVE-2026-114646
NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire
MongoDB · C# Driver
Medium6.9
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency
HMS Networks · PEAK-System Device Driver Setup
Medium6.8