Cyber Resilience

CWE · MITRE source

CWE-131Incorrect Calculation of Buffer Size

Abstraction: Base · CVEs in our corpus: 211

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

Last updated: 11 August 2026 21:18 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 1 framework(s): CAPEC 2 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
  • SA-8 Security and Privacy Engineering Principles
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2003-0899 8.69.80.21682003-11-03
CVE-2005-3120 8.69.80.23262005-10-17
CVE-2001-0249 8.59.80.19752001-06-18
CVE-2020-17087 KEV 8.57.80.05432020-11-11
CVE-2026-42945 8.58.10.66042026-05-13
CVE-2005-2103 8.49.80.16052005-08-16
CVE-2020-8450 8.37.30.71792020-02-04
CVE-2020-6113 8.37.80.68622020-09-17
CVE-2001-0248 8.29.80.11172001-06-18
CVE-2004-1363 8.29.80.09102004-08-04
CVE-2008-0599 8.29.80.10922008-05-05
CVE-2002-1347 8.19.80.07082002-12-18
CVE-2004-0434 8.19.80.07162004-07-07
CVE-2023-36824 8.17.40.77422023-07-11
CVE-2021-0254 7.79.80.02572021-04-22
CVE-2024-23621 7.710.00.01852024-01-26
CVE-2024-23622 7.710.00.01852024-01-26
CVE-2019-10627 7.69.80.01392019-11-21
CVE-2020-11901 7.69.00.21122020-06-17
CVE-2020-15350 7.69.80.01472020-07-07
CVE-2024-23606 7.69.80.01682024-02-20
CVE-2019-10500 7.59.80.00902019-12-18
CVE-2021-27378 7.59.80.01232021-02-18
CVE-2021-21824 7.59.80.01212021-06-11
CVE-2023-24819 7.59.80.00982023-04-24