CWEweakness
CWE-229 Improper Handling of Values
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.
Common consequences
• Integrity: Unexpected State
Detection methods
• Fuzzing: Fuzz testing (fuzzing) is a powerful technique for generating large numbers of diverse inputs - either randomly or algorithmically - and dynamically invoking the code with those inputs. Even with random inputs, it is often capable of generating unexpected results such as crashes, memory corruption, or resource consumption. Fuzzing effectively produces repeatable test cases that clearly indicate bugs, which helps developers to diagnose the issues.
Related
Child of · CWE (1)
- CWE-228 Improper Handling of Syntactically Invalid Structure weakness
Referenced by CVE · weakness (21)
- CVE-2026-59565 A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client… vulnerability
- CVE-2026-59566 A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on… vulnerability
- CVE-2025-35973 Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of… vulnerability
- CVE-2026-45602 No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. vulnerability
- CVE-2025-59032 ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. vulnerability
- CVE-2026-4736 Improper Handling of Values vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules). vulnerability
- CVE-2025-31648 Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. vulnerability
- CVE-2025-7964 After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in… vulnerability
- CVE-2025-20268 A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow… vulnerability
- CVE-2024-20431 A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… vulnerability
- CVE-2024-39531 An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series… vulnerability
- CVE-2024-36737 Improper input validation in OneFlow-Inc. vulnerability
- CVE-2024-30800 PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function. vulnerability
- CVE-2024-30917 An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain… vulnerability
- CVE-2024-29460 An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point… vulnerability
- CVE-2024-0607 A flaw was found in the Netfilter subsystem in the Linux kernel. vulnerability
- CVE-2022-4851 Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1. vulnerability
- CVE-2022-2809 A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. vulnerability
- CVE-2022-3409 A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. vulnerability
- CVE-2022-22562 Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. vulnerability
- CVE-2022-24412 Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. vulnerability