CWE-409 is Improper Handling of Highly Compressed Data (Data Amplification). The flaw arises when the product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output. The database currently holds 103 vulnerabilities mapped to CWE-409 and none of them are in the CISA Known Exploited Vulnerabilities catalog.
Analyzing data...
No vulnerability data in CISA KEV for CWE-409
The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
An example of data amplification is a "decompression bomb," a small ZIP file that can produce a large amount of data when it is decompressed.
| Impact | Scope | Explanation |
|---|---|---|
| DoS: Amplification, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory) | Availability | System resources, CPU and memory, can be quickly consumed. This can lead to poor system performance or system crash. |
Below are representative vulnerabilities related to this CWE, prioritized by severity.
CWE™ Program, operated by The MITRE Corporation. Copyright © 2006–2026, The MITRE Corporation. The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. CWE Terms of Use.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Review CyStack's security rating and practical recommendations for websites and edge assets.
Explore cybersecurity research from our team of security specialists.
Browse practical cybersecurity knowledge across CyStack's articles and guides.
en
