CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- zcashfoundation zebra Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection 8.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus 6.2 Medium
- freerdp FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest 8.7 High
- freerdp FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event 8.7 High
- mongodb c driver remote abort and memory disclosure from a malformed cursor.ns 7.1 High
- freerdp FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token 8.2 High
- freerdp FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload 5.3 Medium
- freerdp FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion 5.3 Medium
- freerdp FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder 7.1 High
- freerdp FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion 7.1 High
- freerdp FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response 5.3 Medium
- freerdp FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging 2.3 Low
- gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags 6.5 Medium
- freerdp FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder 7.1 High
- mediatek, inc. mediatek chipset In Modem, there is a possible application crash due to a logic error. This could lead to remote... 5.3 Medium
- mediatek, inc. mediatek chipset In Modem, there is a possible application crash due to improper input validation. This could lead... 5.3 Medium
- tesseract-ocr tesseract Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service 5.5 Medium
- ggml-org llama.cpp ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion 6.9 Medium
- vllm vLLM DeepSeek-OCR image processing vulnerable to denial of service 6.5 Medium
- zephyrproject zephyr Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses 7.1 High
- cisco telepresence video communication server (vcs) expressway Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities 7.5 High
- ntpsec Reachable Assertion in ntpsec 7.5 High
- isc bind 9 Specific RPZ configurations and query patterns may result in an unexpected exit 7.5 High
- isc bind 9 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization 7.5 High
- apache software foundation brpc Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service 7.5 High
- apache software foundation brpc Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames 7.5 High
- apache software foundation brpc Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder 7.5 High
- apache software foundation brpc Apache bRPC: Out-of-Bounds Write in Redis Command Parser 9.1 Critical
- ibm cyberfraud IBM Cyber Fraud Reachable Assertion 3.7 Low
- advantech adam-3600 A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault,... 8.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd 5.5 Medium
- nodejs undici undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation 7.5 High
- nasa fprime F´: SendPartial Integer Overflow Leading to Assertion DoS 6.5 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message 7.1 High
- nasa fprime F´: FileUplink Unknown Packet Type Assertion DoS 7.5 High
- nasa fprime F´: GenericHub Malformed Buffer Assertion DoS 7.5 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used 7.1 High
- nasa fprime F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge 6.5 Medium
- nasa fprime F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion 6.5 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled 7.1 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled 7.1 High
- juniper networks junos os evolved Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled 8.7 High
- juniper networks junos os evolved Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled 7.1 High
- Show olderLoading…