CWE-232 (未定义值处理不恰当) — Vulnerability Class 10

10 vulnerabilities classified as CWE-232 (未定义值处理不恰当). AI Chinese analysis included.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-20314	Cisco IOS XE 安全漏洞 — Cisco IOS XE Software	6.7	Medium	2025-09-24
CVE-2025-40775	DNS message with invalid TSIG causes an assertion failure — BIND 9	7.5	High	2025-05-21
CVE-2025-20192	Cisco IOS XE 安全漏洞 — Cisco IOS XE Software	7.7	High	2025-05-07
CVE-2023-39915	Crashes on parsing certain invalid RPKI objects — Routinator	7.5	High	2023-09-13
CVE-2023-39914	BER/CER/DER decoder panics on invalid input — bcder	7.5	High	2023-09-13
CVE-2023-36848	Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet — Junos OS	6.5	Medium	2023-07-14
CVE-2023-2968	Undefined variable usage in npm package "proxy" leads to remote denial of service	7.5	High	2023-05-30
CVE-2022-22213	Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update — Junos OS	5.9	Medium	2022-07-20
CVE-2021-3718	Lenovo ThinkPad 安全漏洞 — ThinkPad BIOS	4.3	Medium	2021-11-12
CVE-2021-34705	Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability — Cisco IOS	5.3	Medium	2021-09-23

Vulnerabilities classified as CWE-232 (未定义值处理不恰当) represent 10 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.