Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-789
Common Weakness Enumeration

CWE-789: Memory Allocation with Excessive Size Value

ShareXLinkedInRedditHN

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Abstraction
Variant
Related CVEs
21

▪ References & documentation

MITRE CWE definitionNVD CWE listing

▪ Related CVEs

CVE-2026-40894Medium

Security vulnerability in opentelemetry

CVE-2026-44967Medium

Security vulnerability in opentelemetry

CVE-2026-41178Medium

Security vulnerability in opentelemetry

CVE-2026-39882Medium

Security vulnerability in opentelemetry

CVE-2025-11579Medium

Security vulnerability in github.com/nwaples/rardecode

CVE-2025-11579Medium

Security vulnerability in github.com/nwaples/rardecode

CVE-2023-39203Medium

Security vulnerability in zoom

CVE-2025-66199Medium

Security vulnerability in openssl

CVE-2026-43868Medium

Security vulnerability in thrift

CVE-2025-11579Medium

Security vulnerability in github.com/nwaples/rardecode

CVE-2025-66199Medium

Security vulnerability in openssl

CVE-2026-10142High

Security vulnerability in kafka-python

CVE-2026-54059High

Security vulnerability in pillow

CVE-2026-55379High

Security vulnerability in pillow

GHSA-phj9-mv4w-65pmHigh

Security vulnerability in pillow

GHSA-vjc4-5qp5-m44jHigh

Security vulnerability in pillow

CVE-2026-54060High

Security vulnerability in pillow

CVE-2026-40894Medium

Security vulnerability in opentelemetry

CVE-2026-44967Medium

Security vulnerability in opentelemetry

CVE-2026-39882Medium

Security vulnerability in opentelemetry

CVE-2026-41178Medium

Security vulnerability in opentelemetry