Skip to content
OpenAdvisories

Weakness (CWE)

CWE-130: Improper Handling of Length Parameter Inconsistency

Base Incomplete

The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

More detail

If an attacker can manipulate the length parameter associated with an input such that it is inconsistent with the actual length of the input, this can be leveraged to cause the target application to behave in unexpected, and possibly, malicious ways. One of the possible motives for doing so is to pass in arbitrarily large input to the application. Another possible motivation is the modification of application state by including invalid data for subsequent properties of the application. Such weaknesses commonly lead to attacks such as buffer overflows and execution of arbitrary code.

How to prevent it (3 mitigations)

  1. Implementation

    When processing structured incoming data containing a size field followed by raw data, ensure that you identify and resolve any inconsistencies between the size field and the actual size of the data.

  2. Implementation

    Do not let the user control the size of the buffer.

  3. Implementation

    Validate that the length of the user-supplied data is consistent with the buffer size.

Source: MITRE CWE-130

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.0
    CVE-2026-33555 Public exploit

    An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches…

    HAProxy HAProxy haproxy haproxy Debian Ubuntu
  • Medium 5.3
    CVE-2026-33936 Public exploit

    python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

    The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Prio…

    tlsfuzzer python-ecdsa ecdsa python-ecdsa Debian Ubuntu PyPI
  • Medium 4.4
    CVE-2025-23247 Public exploit

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the le…

    NVIDIA NVIDIA CUDA Toolkit nvidia-cuda-toolkit nvidia-cuda-toolkit Debian Ubuntu
  • Medium 5.3
    CVE-2023-40167 Public exploit

    Jetty accepts "+" prefixed value in Content-Length

    Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and othe…

    eclipse jetty.project jetty9 jetty9 Debian Ubuntu Maven
  • Medium 5.3
    CVE-2020-8927 Public exploit

    Buffer overflow in Brotli library

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…

    Google Brotli brotli brotli Debian Ubuntu Alpine