CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- tinyexr project tinyexrtinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreUser process can perform the kernel DOS in ashmem when doing cache maintenance operation in all...5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreThe TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote...6.5 Medium
- exiv2In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an...6.5 Medium
- jasper project jasperJasPer 2.0.14 allows denial of service via a reachable assertion in the function...6.5 Medium
- apple icloud, itunes, safari +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...6.5 Medium
- jasper project jasperJasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in...5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify...6.5 Medium
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- debian bind9, linux +1 moreBackport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:18587.5 High
- exiv2In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp,...6.5 Medium
- opencv, debian linux +1 moreReachable Assertion in OpenCV.5.5 Medium
- redhat ceph, fedoraproject fedora +1 moreRADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial...6.5 Medium
- openafs, debian linux +1 moreOpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote...7.5 High
- sound exchange project exchange, debian linux +1 moreThere is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound...5.5 Medium
- linux kernelThe KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of...5.5 Medium
- graphicsmagickReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG...5.5 Medium
- linux kernelThe access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11...6.0 Medium
- qemuThe vga display update in mis-calculated the region for the dirty bitmap snapshot in case split...6.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297...7.5 High
- jasper project jasperThere is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in...7.5 High
- libtiffThere is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0...6.5 Medium
- libtiffThere is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8,...6.5 Medium
- imagemagickIn ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data...6.5 Medium
- gnu psppThere is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of...7.5 High
- gnu psppThere is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the...7.5 High
- mit kerberos, kerberos 5, fedoraproject fedora +2 moreIn MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage...6.5 Medium
- yaml-cpp project yaml-cppThe function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote...7.5 High
- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a reachable assertion in the Internal::TiffReader::visitDirectory function in...6.5 Medium
- imagemagickThe WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0...6.5 Medium
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when...7.5 High
- torproject tor, debian linux +1 moreThe hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure...7.5 High
- torproject torThe hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure...7.5 High
- imagemagickIn ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo,...6.5 Medium
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of...7.5 High
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob...6.5 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the...6.5 Medium
- openvpnOpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via...7.5 High
- Show moreLoading…