CWEweakness

CWE-232 Improper Handling of Undefined Values

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

Common consequences

• Integrity: Unexpected State

Observed examples

• CVE-2000-1003: Client crash when server returns unknown driver type.

Related

Observed example · CVE (1)

  • CVE-2000-1003 NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to… vulnerability

Child of · CWE (1)

  • CWE-229 Improper Handling of Values weakness

Referenced by CVE · weakness (12)

  • CVE-2026-92088 Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. vulnerability
  • CVE-2026-21689 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color… vulnerability
  • CVE-2025-20314 A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated… vulnerability
  • CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. vulnerability
  • CVE-2025-20192 A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote… vulnerability
  • CVE-2023-39914 NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data… vulnerability
  • CVE-2023-39915 NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. vulnerability
  • CVE-2023-36848 An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (PPMD) of Juniper Networks Junos OS on MX… vulnerability
  • CVE-2023-2968 A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. vulnerability
  • CVE-2022-22213 A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS… vulnerability
  • CVE-2021-3718 A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics… vulnerability
  • CVE-2021-34705 A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an… vulnerability