CWE-237 Improper Handling of Structural Elements
baseThe product does not handle or incorrectly handles inputs that are related to complex structures.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (17)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-34429US | high7.5 | — | ||
Weintek Weincloud v0.13.6
could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
| ||||
| CVE-2019-1000007US | high7.4 | — | ||
aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard fun… | ||||
| CVE-2011-2957US | medium6.9 | — | ||
Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Di… | ||||
| CVE-2026-23154US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: fix segmentation of forwarding fraglist GRO
This patch enhances GSO segment handling by properly checking… | ||||
| CVE-2025-38370US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix failure to rebuild free space tree using multiple transactions
If we are rebuilding a free space tr… | ||||
| CVE-2024-36929US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: core: reject skb_copy(_expand) for fraglist GSO skbs
SKB_GSO_FRAGLIST skbs must not be linearized, otherw… | ||||
| CVE-2024-35936US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
The unhandled case in btrfs_relocate_sys_… | ||||
| CVE-2024-35877US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: fix VM_PAT handling in COW mappings
PAT handling won't do the right thing in COW mappings: the fir… | ||||
| CVE-2024-35815US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
The first kiocb_set_cancel_fn() argument may… | ||||
| CVE-2020-36766US | low3.3 | — | ||
An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memory on specific hardware to unprivileged users, because of di… | ||||
| CVE-2026-64046US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: tls: prevent chain-after-chain in plain text SG
Sashiko points out that if end = 0 (start != 0) the curre… | ||||
| CVE-2026-46251US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix block_group_tree dirty_list corruption
When the incompat flag EXTENT_TREE_V2 is set, we uncondition… | ||||
| CVE-2026-45411US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is… | ||||
| CVE-2026-43033US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
When decrypting data that is… | ||||
| CVE-2022-50627US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix monitor mode bringup crash
When the interface is brought up in monitor mode, it leads
to NUL… | ||||
| CVE-2025-24336US | — | — | ||
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed. | ||||
| CVE-2023-6110US | — | — | ||
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any applic… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan