CWE-839 · Input Validation and Logic
Numeric Range Comparison Without Minimum Check
9CVEs
SortMost likely exploited
9 CVEs with CWE-839 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-20925Denial of service via malformed network packetMongoDB Inc. · MongoDB Server · CVSS 7.5 · 2020-11-24 | 7.5 | 1.7% | 2020-11-24 |
| CVE-2026-53176IB/isert: Reject login PDUs shorter than ISER_HEADERS_LENLinux · Linux · CVSS 9.8 · 2026-06-25 | 9.8 | 0.8% | 2026-06-25 |
| CVE-2026-57186Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserasterisk · asterisk · CVSS 7.5 · 2026-10-27 | 7.5 | 0.6% | 2026-10-27 |
| CVE-2023-22854The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient res…Mitel · Micontact Center Business · CVSS 9.1 · 2023-02-13 | 9.1 | 0.6% | 2023-02-13 |
| CVE-2023-0425Buffer overflow in global memory regionABB · Freelance controllers AC 700F · CVSS 8.6 · 2023-08-07 | 8.6 | 0.5% | 2023-08-07 |
| CVE-2026-56968GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.GNU · GNU SASL · CVSS 3.7 · 2026-06-23 | 3.7 | 0.4% | 2026-06-23 |
| CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.GNU · mtools · CVSS 6.1 · 2026-10-28 | 6.1 | 0.3% | 2026-10-28 |
| CVE-2026-48840Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.Exim · Exim · CVSS 5.3 · 2026-05-30 | 5.3 | 0.3% | 2026-05-30 |
| CVE-2026-129248Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum checkAkaunting · Akaunting · CVSS 4.3 · 2026-11-14 | 4.3 | – | 2026-11-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.