CWEweakness

CWE-115 Misinterpretation of Input

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

Common consequences

• Integrity: Unexpected State

Detection methods

• Fuzzing: Fuzz testing (fuzzing) is a powerful technique for generating large numbers of diverse inputs - either randomly or algorithmically - and dynamically invoking the code with those inputs. Even with random inputs, it is often capable of generating unexpected results such as crashes, memory corruption, or resource consumption. Fuzzing effectively produces repeatable test cases that clearly indicate bugs, which helps developers to diagnose the issues.

Observed examples

• CVE-2005-2225: Product sees dangerous file extension in free text of a group discussion, disconnects all users. • CVE-2001-0003: Product does not correctly import and process security settings from another product.

Related

Observed example · CVE (2)

  • CVE-2005-2225 Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is… vulnerability
  • CVE-2001-0003 Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security… vulnerability

Child of · CWE (1)

  • CWE-436 Interpretation Conflict weakness

Referenced by CVE · weakness (32)

  • CVE-2026-73798 A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. vulnerability
  • CVE-2026-63650 OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509… vulnerability
  • CVE-2026-17351 The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse,… vulnerability
  • CVE-2026-17566 pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template… vulnerability
  • CVE-2026-42004 An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT… vulnerability
  • CVE-2026-12491 A flaw was found in vLLM, an open-source library for large language model inference. vulnerability
  • CVE-2025-68113 ALTCHA is privacy-first software for captcha and bot protection. vulnerability
  • CVE-2025-55303 Astro is a web framework for content-driven websites. vulnerability
  • CVE-2025-54584 GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). vulnerability
  • CVE-2025-5826 Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability. vulnerability
  • CVE-2025-5747 WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability. vulnerability
  • CVE-2025-32908 A flaw was found in libsoup. vulnerability
  • CVE-2024-11169 An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. vulnerability
  • CVE-2025-22870 Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. vulnerability
  • CVE-2025-25069 A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks. vulnerability
  • CVE-2023-32228 A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last… vulnerability
  • CVE-2023-32260 Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and… vulnerability
  • CVE-2023-0880 Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11. vulnerability
  • CVE-2022-20915 A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an… vulnerability
  • CVE-2022-3224 Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0. vulnerability
  • CVE-2022-1233 URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11. vulnerability
  • CVE-2022-21672 make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. vulnerability
  • CVE-2021-1587 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow… vulnerability
  • CVE-2021-21366 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. vulnerability
  • CVE-2021-0207 An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does… vulnerability
  • CVE-2020-27846 A signature verification vulnerability exists in crewjam/saml. vulnerability
  • CVE-2020-29509 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization… vulnerability
  • CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization… vulnerability
  • CVE-2020-29511 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization… vulnerability
  • CVE-2018-12116 Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized… vulnerability
Show all 32 ›

Referenced by OWASP · mapped cwe (1)