CWE-440— Expected Behavior Violation
A feature, API, or function does not perform according to its specification.— MITRE CWE catalog
56 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-440page 2 of 2
- CVE-2024-38806LOWCVSS 3.9EG 3.92024-07-18
Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 , potentially resulting in users retaining access rights they should not …
- CVE-2026-114049LOWCVSS 3.7EG 3.72026-10-21
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate r…
- CVE-2026-35191LOWCVSS 3.7EG 3.72026-09-29
Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated con…
- CVE-2025-46712LOWCVSS 3.7EG 3.72025-05-08
Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening …
- CVE-2024-58265LOWCVSS 3.1EG 3.12025-07-27
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.
- CVE-2023-26819LOWCVSS 2.9EG 2.92025-04-19
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
Map vulnerabilities like CWE-440 to your infrastructure
EchelonGraph correlates every CVE — across CWE-440 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →