CWE-475: Undefined Behavior for Input to API
The behavior of this function is undefined unless its control parameter is set to a specific value.
A kind of CWE-573 Improper Following of Specification by Caller.
From the CWE List. © The MITRE Corporation.
Newest
- hewlett packard enterprise hpe nonstop tsqlfil HPE NonStop TSQLFIL - Memory corruption vulnerability 5.3 Medium
- netty Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 9.1 Critical
- aws opensearch Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin 8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Other issue in the JavaScript Engine component 5.3 Medium
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 more Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression) 7.1 High
- color iccdev iccDEV has Type Confusion in CIccTagXmlTagData::ToXml() 6.3 Medium
-
rtvm-interpretercrates.io rtvm-interpreter lacks sufficient checks in public API 2.7 Low - trend micro, inc. micro apex central, trendmicro apex central +1 more An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0... 4.3 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 more A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955... 7.5 High
- gradio-app gradio-app/gradio, gradio project gradio +1 more Zip Bomb Vulnerability in gradio-app/gradio 7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 more Remote Code Execution in binary-husky/gpt_academic 8.8 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow 5.4 Medium
- cisco clamav, clam antivirus +1 more ClamAV HTML Parser Denial of Service Vulnerability 7.5 High
- google android, unisoc s8000, t760 +3 more +5 more In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.... 5.3 Medium
- mutt, debian linux +1 more Undefined Behavior for Input to API in Mutt 4.3 Medium
- mutt, debian linux +1 more Undefined Behavior for Input to API in Mutt 2.2 Low
- redhat openshift api for data protection, openshift container platform, openshift developer tools and services +2 more distribution catalog API endpoint can lead to OOM via malicious user input 6.5 Medium
- vim, vim vim/vim, debian linux +2 more Out-of-bounds Write to API in vim/vim 6.5 Medium
- google tensorflow Undefined behavior when users supply invalid resource handles in TensorFlow 5.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Denial of Service when processing malformed Role names 7.5 High