Security Resilience

CWE · MITRE source

CWE-409Improper Handling of Highly Compressed Data (Data Amplification)

Abstraction: Base · CVEs in our corpus: 161

The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.

An example of data amplification is a "decompression bomb," a small ZIP file that can produce a large amount of data when it is decompressed.

Last updated: 15 October 2026 20:36 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • SC-5 Denial-of-service Protection
  • PR.IR-04
  • PR.PS-06
  • SC-6 Resource Availability
Detect
Catch it (CSF Detect / Respond)
  • DE.CM-09
Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls PROPOSED for this weakness (1)AI-assisted

These are model PROPOSALS, not graded mappings. They come from controls_to_cwe_proposals, which carries no grade field at all; across the CWE pages 1,540 of 1,722 such associations (89%) have never been graded by anything. The heading said “address” until 2026-09-29, which asserted a relationship the data does not carry. Graded cross-walks are on the framework map, not here.

Control Title Family Why it addresses this CWE
SC-5Denial-of-service ProtectionSCLimits effects of data amplification from compressed or malicious inputs.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2026-278097.09.10.00702026-02-26
CVE-2026-49975 6.47.50.04172026-06-08
CVE-2024-43499 6.37.50.02602024-11-12
CVE-2026-21441 6.37.50.02922026-01-07
CVE-2022-29225 6.27.50.01582022-06-09
CVE-2026-44697 6.28.60.00462026-05-29
CVE-2026-1026956.28.20.00312026-10-14
CVE-2026-1526 6.17.50.01172026-03-12
CVE-2026-47774 6.17.50.01052026-06-17
CVE-2024-28101 6.07.50.00772024-03-21
CVE-2024-3572 6.07.50.00812024-04-16
CVE-2024-12886 6.07.50.00732025-03-20
CVE-2024-7765 6.07.50.00782025-03-20
CVE-2026-29785 6.07.50.00972026-03-25
CVE-2026-40036 6.07.50.00792026-04-08
CVE-2026-40192 6.07.50.00872026-04-15
CVE-2026-44432 6.07.50.00882026-05-13
CVE-2026-48594 6.07.50.00702026-06-02
CVE-2026-49755 6.07.50.00702026-06-08
CVE-2026-242646.07.50.00722026-07-01
CVE-2026-598036.07.50.00742026-07-08
CVE-2026-15709 6.07.50.00882026-07-14
CVE-2026-416086.07.50.01032026-07-27
CVE-2026-485866.07.50.01032026-07-27
CVE-2026-491586.07.50.01032026-07-27