CWE-1284Improper Validation of Specified Quantity in Input

Abstraction: Base · CVEs in our corpus: 382

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Specified quantities include size, length, frequency, price, rate, number of operations, time, and others. Code may rely on specified quantities to allocate resources, perform calculations, control iteration, etc.

Last updated: 21 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

V6.7.2
V1.4.2
V2.1.1
V2.2.1

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2022-20699` KEV	10.0	10.0	0.7246	2022-02-10
`CVE-2021-43267`	9.5	9.8	0.5758	2021-11-02
`CVE-2022-37134`	8.6	9.8	0.2123	2022-08-22
`CVE-2010-3904` KEV	8.5	7.8	0.1467	2010-12-06
`CVE-2009-4488`	8.3	9.8	0.1276	2010-01-13
`CVE-2008-2374`	7.9	9.8	0.0429	2008-07-07
`CVE-2021-21950`	7.8	10.0	0.0240	2021-12-08
`CVE-2021-21951`	7.8	10.0	0.0240	2021-12-08
`CVE-2021-21960`	7.8	10.0	0.0264	2022-02-04
`CVE-2026-49777`	7.7	10.0	0.0166	2026-06-05
`CVE-2021-31556`	7.6	9.8	0.0162	2021-08-12
`CVE-2022-36938`	7.5	9.8	0.0123	2022-11-11
`CVE-2024-8887`	7.4	10.0	0.0056	2024-09-18
`CVE-2024-1610`	7.4	9.8	0.0068	2024-12-18
`CVE-2022-20385`	7.3	9.8	0.0038	2022-09-13
`CVE-2022-25727`	7.3	9.8	0.0042	2022-11-15
`CVE-2026-3381`	7.3	9.8	0.0055	2026-03-05
`CVE-2022-36620`	7.2	7.5	0.2317	2022-08-31
`CVE-2025-5349`	7.2	8.8	0.0442	2025-06-17
`CVE-2025-55398`	7.2	9.8	0.0037	2025-08-22
`CVE-2022-31629`	7.1	6.5	0.4934	2022-09-28
`CVE-2026-58662`	7.1	9.1	0.0115	2026-07-27
`CVE-2023-54337`	6.9	9.1	0.0050	2026-01-13
`CVE-2026-25345`	6.9	9.9	0.0045	2026-03-25
`CVE-2026-73194`	6.9	9.1	0.0051	2026-08-15