CWE-228

22 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 2High 8Medium 10Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-107299
msgpack5: Reserved byte can cause unbounded stream buffering
mcollina · msgpack5
Medium5.9
CVE-2026-87986
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot…
mistralai · mistral-vibe
Critical10.0
CVE-2026-50103
Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850
MZ Automation · libIEC61850
High7.1
CVE-2025-59174
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may…
Ericsson · Packet Core Controller
High7.1
CVE-2026-25657
Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
Ericsson · Packet Core Gateway (PCG)
High7.1
CVE-2026-42100
DoS in Sparx Pro Cloud Server
Sparx Systems · Pro Cloud Server
High7.1
CVE-2026-34232
Firebird: DoS via `op_response` packet from client
FirebirdSQL · firebird
High7.5
CVE-2024-53828
Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
Ericsson · Packet Core Controller (PCC)
Medium5.3
CVE-2026-20125
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an…
Cisco · IOS
High7.7
CVE-2025-2529
IBM Terracotta denial of service
IBM · Terracotta
Low2.9