CWE-1284 类弱点 211 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1284属于输入验证缺陷，指程序未正确校验输入中指定的数量属性。攻击者常通过提交异常数值（如极大长度或频率）触发资源耗尽、计算错误或逻辑越界，导致服务拒绝或系统崩溃。开发者应实施严格的边界检查，确保输入数量符合预期范围，并在分配资源或控制循环前进行有效性验证，从而防止因非法数量引发的安全风险。
... public static final double price = 20.00; int quantity = currentUser.getAttribute("quantity"); double total = price * quantity; chargeUser(total); ...... #define MAX_DIM 100 ... /* board dimensions */ int m,n, error; board_square_t *board; printf("Please specify the board height: \n"); error = scanf("%d", &m); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } printf("Please specify the board width: \n"); error = scanf("%d", &n); if ( EOF == error ){ die("No integer passed: Die evil hacker!\n"); } if ( m > MAX_DIM || n > MAX_DIM ) { die("Value too large: Die evil hacker!\n"); } board = (board_square_t*) malloc( m * n * sizeof(board_square_t)); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-2826 | Arista EOS 安全漏洞 — EOS | 2.6 | Low | 2025-05-27 |
| CVE-2024-9448 | Arista EOS 安全漏洞 — EOS | 7.5 | High | 2025-05-08 |
| CVE-2025-46656 | python-markdownify 安全漏洞 — python-markdownify | 2.9 | Low | 2025-04-26 |
| CVE-2025-3511 | Mitsubishi Electric多款产品 安全漏洞 — CC-Link IE TSN Remote I/O module NZ2GN2S1-32D | 7.5 | High | 2025-04-25 |
| CVE-2025-43970 | GoBGP 安全漏洞 — GoBGP | 4.3 | Medium | 2025-04-21 |
| CVE-2025-43972 | GoBGP 安全漏洞 — GoBGP | 6.8 | Medium | 2025-04-21 |
| CVE-2025-43964 | Libraw 安全漏洞 — LibRaw | 2.9 | Low | 2025-04-20 |
| CVE-2025-32415 | libxml2 安全漏洞 — libxml2 | 2.9 | Low | 2025-04-17 |
| CVE-2025-25178 | Imagination GPU Driver 安全漏洞 — Graphics DDK | 7.8AI | High AI | 2025-04-04 |
| CVE-2024-45351 | Xiaomi Game center 安全漏洞 — Game center application | 7.8 | High | 2025-03-26 |
| CVE-2024-8000 | Arista EOS 安全漏洞 — EOS | 5.3 | Medium | 2025-03-04 |
| CVE-2024-53879 | NVIDIA CUDA toolkit 安全漏洞 — CUDA Toolkit | 2.8 | Low | 2025-02-25 |
| CVE-2024-53878 | NVIDIA CUDA toolkit 安全漏洞 — CUDA Toolkit | 2.8 | Low | 2025-02-25 |
| CVE-2023-20508 | AMD Graphics Driver 安全漏洞 — AMD Radeon™ RX 6000 Series Graphics Products | 5.0 | Medium | 2025-02-11 |
| CVE-2023-31331 | AMD Client Processor 安全漏洞 — AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | 3.0 | Low | 2025-02-11 |
| CVE-2023-20582 | AMD Server Processor 安全漏洞 — AMD EPYC™ 9004 Processors | 5.3 | Medium | 2025-02-11 |
| CVE-2023-20581 | AMD Server Processor 安全漏洞 — AMD EPYC™ 9004 Processors | 2.5 | Low | 2025-02-11 |
| CVE-2023-20515 | AMD Client Processor 安全漏洞 — AMD Ryzen™ 3000 Series Desktop Processors | 5.7 | Medium | 2025-02-11 |
| CVE-2024-20149 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 | 7.5 | - | 2025-01-06 |
| CVE-2024-52901 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 6.5 | Medium | 2024-12-12 |
| CVE-2024-47257 | AXIS OS 安全漏洞 — AXIS Q6128-E PTZ Network Camera | 7.5 | High | 2024-11-26 |
| CVE-2024-6068 | Rockwell Automation Arena Input Analyzer 安全漏洞 — Arena Input Analyzer | 7.3 | High | 2024-11-14 |
| CVE-2024-7316 | Mitsubishi Electric CNC Series 安全漏洞 — Mitsubishi Electric CNC M800V Series M800VW | 5.9 | Medium | 2024-10-17 |
| CVE-2022-25769 | Mautic 访问控制错误漏洞 — Mautic | 7.2 | High | 2024-09-18 |
| CVE-2024-8887 | CIRCUTOR Q-SMT 安全漏洞 — CIRCUTOR Q-SMT | 10.0 | Critical | 2024-09-18 |
| CVE-2024-5931 | Zephyr 安全漏洞 — Zephyr | 6.3 | Medium | 2024-09-13 |
| CVE-2024-8558 | Food Ordering Management System 安全漏洞 — Food Ordering Management System | 4.3 | Medium | 2024-09-07 |
| CVE-2024-0111 | NVIDIA CUDA toolkit 安全漏洞 — CUDA Toolkit | 4.4 | Medium | 2024-08-31 |
| CVE-2024-6768 | Microsoft Windows 安全漏洞 — Windows 10 | 6.5AI | Medium AI | 2024-08-12 |
| CVE-2024-3036 | ABB System 800xA Base 输入验证错误漏洞 — 800xA Base | 5.7 | Medium | 2024-06-21 |
CWE-1284 是常见的弱点类别，本平台收录该类弱点关联的 211 条 CVE 漏洞。