Common Weakness Enumeration

    CWE Definition / CWE-130

    CWE-130: Improper Handling of Length Parameter Inconsistency

    The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-240: Improper Handling of Inconsistent Structural Elements

    CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CWE-805: Buffer Access with Incorrect Length Value