CWE-252: Unchecked Return Value
The product does not check the return value from a method or function.
A kind of CWE-754 Improper Check for Unusual or Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- gerbv, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the RS-274X aperture definition tokenization...10.0 Critical
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...7.5 High
- nvidia shield tv, shield experience +1 moreNVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an...5.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Medium
- google androidIn ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of...6.7 Medium
- cloudflare octorpki, debian linux +1 moreMisconfigured IP address field in ROA leads to OctoRPKI crash4.2 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA use after return issue was found in Opensc before version 0.22.0 in insert_pin function that...5.3 Medium
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS6.5 Medium
- ibm planning analytics, planning analytics local +1 moreIBM Planning Analytics 2.0 could expose information that could be used to to create attacks by...4.3 Medium
- ffmpeg, debian linux +1 moreadts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits...9.8 Critical
- ibm planning analytics localIBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information...2.7 Low
- linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 moreA NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking...5.5 Medium
- skytableIncorrect Check of Function Return Value in Skytable7.5 High
- ffmpeg, debian linux +1 morelibavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a...5.5 Medium
- radare radare2, fedoraproject fedora +1 moreA vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a...7.5 High
- cesnet libyangIn function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval-...7.5 High
- cesnet libyangIn function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of...7.5 High
- cesnet libyangIn function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of...7.5 High
- python pillow, fedoraproject fedora +1 morePillow denial of service5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...5.5 Medium
- rust-lang rustIn the standard library in Rust before 1.50.0, read_to_end() does not validate the return value...7.5 High
- intel graphics driversUnchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow...5.5 Medium
- xcb project xcbUnchecked Return Value in xcb8.8 High
- xcb project xcbOut of bounds read in xcb9.8 Critical
- xcb project xcbArbitrary return types in xcb9.8 Critical
- xcb project xcbUnchecked Return Value in xcb9.8 Critical
- linbit csync2, debian linux +1 moreAn issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return...5.3 Medium
- apache accumuloApache Accumulo Improper Handling of Insufficient Permissions8.1 High
- dell bsafe micro edition suite, bsafe micro-edition-suite, oracle database +1 more +3 moreDell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return...5.8 Medium
- debian linux, linux kernel, xen +3 more +5 moreAn issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The...8.8 High
- apple macosA denial of service issue was addressed with improved state handling. This issue is fixed in...5.5 Medium
- gnu glibcmanual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the...9.8 Critical
- google tensorflow, opensuse leap +1 moreUndefined behavior in Tensorflow5.3 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5,...5.3 Medium
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...4.7 Medium
- silk-v3-decoder project silk-v3-decoderThe decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check...9.8 Critical
- accusoft imagegearA code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of...9.8 Critical
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the message-parsing functionality of...7.5 High
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...9.8 Critical
- doas project doasAn issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On...9.8 Critical
- freerdp, lodev lodepng, opensuse leap +2 moreHuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in...7.5 High
- google androidIn libskia, there is a possible crash due to a missing null check. This could lead to remote...6.5 Medium
- ffmpegFFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...8.8 High
- miniupnp.free miniupnpdThe upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet...7.5 High
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...5.5 Medium
- qemu, canonical ubuntu linux +1 moreQEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders...6.5 Medium
- Show moreLoading…