CWE-789Memory Allocation with Excessive Size Value

Abstraction: Variant · CVEs in our corpus: 219

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Last updated: 22 August 2026 00:25 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SC-6 Resource Availability
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2022-30522`	8.4	7.5	0.9041	2022-06-09
`CVE-2023-24201`	7.5	9.8	0.0089	2023-02-06
`CVE-2026-49975`	7.3	7.5	0.2798	2026-06-08
`CVE-2026-14454`	7.3	9.8	0.0037	2026-07-08
`CVE-2026-27809`	6.8	9.1	0.0041	2026-02-26
`CVE-2022-36078`	6.7	8.8	0.0096	2022-09-02
`CVE-2025-27533`	6.7	7.5	0.0859	2025-05-07
`CVE-2017-7651`	6.5	7.5	0.0529	2018-04-24
`CVE-2020-24685`	6.5	8.6	0.0161	2021-02-09
`CVE-2023-43632`	6.4	9.0	0.0054	2023-09-21
`CVE-2023-3223`	6.3	7.5	0.0268	2023-09-27
`CVE-2024-43484`	6.3	7.5	0.0294	2024-10-08
`CVE-2024-20260`	6.3	8.6	0.0062	2024-10-23
`CVE-2021-34868`	6.2	8.8	0.0042	2022-01-25
`CVE-2021-34869`	6.2	8.8	0.0042	2022-01-25
`CVE-2025-62599`	6.2	8.6	0.0036	2026-02-03
`CVE-2025-62600`	6.2	8.6	0.0041	2026-02-03
`CVE-2022-22188`	6.1	7.5	0.0148	2022-04-14
`CVE-2022-31804`	6.1	7.5	0.0110	2022-06-24
`CVE-2022-34917`	6.1	7.5	0.0131	2022-09-20
`CVE-2023-6516`	6.1	7.5	0.0111	2024-02-13
`CVE-2026-53917`	6.1	7.5	0.0118	2026-06-30
`CVE-2017-7652`	6.0	7.5	0.0168	2018-04-25
`CVE-2023-30837`	6.0	7.5	0.0070	2023-05-08
`CVE-2023-20108`	6.0	7.5	0.0093	2023-06-28