CWE-252: Unchecked Return Value
The product does not check the return value from a method or function.
A kind of CWE-754 Improper Check for Unusual or Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- watchguard authpoint authentication gateway WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service 9.2 Critical
- eclipse foundation threadx NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full 8.2 High
- eclipse foundation threadx netx duo NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full 8.7 High
- labstack echo Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests 6.3 Medium
- haproxy, haproxy enterprise edition, kubernetes ingress controller +1 more +3 more HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ... 7.5 High
- apache software foundation brpc Apache bRPC: Out-of-Bounds Write in Redis Command Parser 9.1 Critical
- mz automation libiec61850 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS 7.5 High
- mz automation libiec61850 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead 7.5 High
- the libreswan project libreswan Null Pointer Dereference in PKCS#7 bundle with no certificates 7.5 High
- riot-os riot RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion 7.5 High
- sirius computer, inc. crux agent Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated 6.3 Medium
- mongodb php driver Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver 6.3 Medium
- thales sconnect SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability 9.4 Critical
- google chrome Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local... 2.9 Low
- linux, linux kernel +1 more ntfs: propagate reparse index insertion failure 5.5 Medium
- linux, linux kernel +1 more ksmbd: propagate DACL parsing errors 5.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 more RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS 8.2 High
- dell update package framework Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value... 8.2 High
- webassembly wabt wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily... 7.1 High
- grokability snipe-it snipe-it before 8.7.0 Data Loss via Failed Image Write 7.0 High
- grokability snipe-it Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence 2.3 Low
- gnome libxml2 xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a... 2.9 Low
- nodejs undici undici vulnerable to Denial of Service via unrequested WebSocket subprotocol 7.5 High
- chewkeanho software-actualizer (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The i… 7.9 High
- ash-project ash postgres rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres 7.2 High
- torproject tor tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails.... 6.5 Medium
- mybb MyBB: Buddy list corruption 4.3 Medium
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +5 more +7 more .NET Elevation of Privilege Vulnerability 7.8 High
- the libreswan project libreswan FIPS mode assertion failure via malicious CERT payload 7.5 High
- linux, linux kernel +1 more cachefiles: Fix error return when vfs_mkdir() fails 5.5 Medium
- imagemagick ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP 6.3 Medium
- python software foundation cpython tarfile opened in streaming mode mishandles EOF 8.2 High
- imagemagick ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression 5.5 Medium
- nimiq core-rs-albatross nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT 7.5 High
- amd ryzen embedded 8000 series processors, ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +1 more +3 more An unchecked return value within the AMD Platform Management Framework (PMF) could allow an... 7.1 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An unchecked return value within the AMD Platform Management Framework (PMF) could allow an... 8.3 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 more BIG-IP Advanced WAF and ASM vulnerability 8.7 High
- intel quickassist technology Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13... 4.8 Medium
- andybalholm brotli, 7-zip p7zip, anthropic bun +34 more +36 more Out-of-Bounds Write in Google Brotli Decoder 9.2 Critical
- nimiq nimiq-primitives, proof-of-stake +1 more nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals 7.5 High
- uutils coreutils uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression 3.3 Low
- uutils coreutils uutils coreutils chmod False Success Exit Code in Recursive Mode 5.5 Medium
- nimiq core-rs-albatross, proof-of-stake +1 more nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index 5.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS 6.5 Medium
- getkirby kirby Withdrawn Advisory: Kirby CMS has Persistent DoS via Malformed Image Upload 6.5 Medium
- linux, linux kernel +1 more ASoC: SDCA: Add allocation failure check for Entity name 5.5 Medium
- sigstore, sigstore sigstore-ruby +1 more sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest 7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more ImageMagick has an uninitialized pointer dereference in JBIG decoder 7.5 High
- haproxy aloha, haproxy, haproxy enterprise +2 more HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because... 3.7 Low
- nokogiri Nokogiri before 1.19.1 Unchecked Return Value canonicalize 6.9 Medium
- Show olderLoading…