CWE · MITRE source
CWE-805Buffer Access with Incorrect Length Value
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
When the length value exceeds the size of the destination, a buffer overflow could occur.
Last updated: 14 October 2026 20:41 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2020-14509 UPD | 7.7 | 9.8 | 0.0207 | 2020-09-16 |
CVE-2026-8091 UPD | 7.4 | 9.8 | 0.0060 | 2026-05-07 |
CVE-2026-31607 UPD | 7.2 | 9.8 | 0.0031 | 2026-04-24 |
CVE-2026-12087 | 6.8 | 9.1 | 0.0037 | 2026-06-15 |
CVE-2026-26955 UPD | 6.6 | 8.8 | 0.0057 | 2026-02-25 |
CVE-2023-20049 UPD | 6.4 | 8.6 | 0.0105 | 2023-03-09 |
CVE-2025-23319 UPD | 6.4 | 8.1 | 0.0158 | 2025-08-06 |
CVE-2024-37305 UPD | 6.2 | 8.2 | 0.0045 | 2024-06-17 |
CVE-2025-23318 UPD | 6.2 | 8.1 | 0.0074 | 2025-08-06 |
CVE-2025-20315 UPD | 6.2 | 8.6 | 0.0044 | 2025-09-24 |
CVE-2020-16101 UPD | 6.1 | 7.5 | 0.0104 | 2020-09-15 |
CVE-2021-31885 UPD | 6.1 | 7.5 | 0.0124 | 2021-11-09 |
CVE-2024-24851 UPD | 6.1 | 7.5 | 0.0142 | 2024-05-28 |
CVE-2022-47375 UPD | 6.0 | 7.5 | 0.0072 | 2023-12-12 |
CVE-2026-44893 UPD | 6.0 | 7.5 | 0.0088 | 2026-06-12 |
CVE-2023-52557 UPD | 5.9 | 7.5 | 0.0056 | 2024-03-01 |
CVE-2023-5396 UPD | 5.8 | 7.4 | 0.0071 | 2024-04-17 |
CVE-2025-20169 UPD | 5.8 | 7.7 | 0.0078 | 2025-02-05 |
CVE-2025-20170 UPD | 5.8 | 7.7 | 0.0078 | 2025-02-05 |
CVE-2025-20174 UPD | 5.8 | 7.7 | 0.0076 | 2025-02-05 |
CVE-2025-20175 UPD | 5.8 | 7.7 | 0.0076 | 2025-02-05 |
CVE-2025-30651 UPD | 5.8 | 7.5 | 0.0042 | 2025-04-09 |
CVE-2026-1837 UPD | 5.8 | 7.5 | 0.0032 | 2026-02-11 |
CVE-2025-63547 | 5.8 | 7.5 | 0.0036 | 2026-05-01 |
CVE-2022-0519 UPD | 5.6 | 7.1 | 0.0095 | 2022-02-08 |