CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpeg, debian linux +1 moreFFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion...7.5 High
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to assertion failure in crwimage_int.cpp5.5 Medium
- digium asteriskAn issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re...6.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in...6.5 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability7.7 High
- polipo project polipo** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1 allows denial of service via a reachable...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +203 more +205 moreImproper handling of received malformed FTMR request frame can lead to reachable assertion while...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +205 more +207 morePossible assertion due to improper verification while creating and deleting the peer in...7.5 High
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9380 firmware +37 more +39 moreAn assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement...7.5 High
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the ...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 moreDenial of service in SAP case due to improper handling of connections when association is...7.5 High
- jerryscriptThere is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...7.5 High
- jerryscriptThere is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in...7.5 High
- jerryscriptThere is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || ...7.5 High
- jerryscriptThere is an Assertion 'block_found' failed at js-parser-statm.c:2003...7.5 High
- jerryscriptThere is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510...7.5 High
- jerryscriptThere is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c...7.5 High
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...7.5 High
- jerryscriptThere is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at...7.5 High
- jerryscriptThere is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js...7.5 High
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +184 more +186 moreReachable assertion is possible while processing peer association WLAN message from host and...7.5 High
- openvpn access serverOpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user...7.5 High
- upx, fedoraproject fedora, redhat enterprise linux +2 moreAn assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow...5.5 Medium
- whohas project whohasA flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...7.5 High
- cesnet libyangIn function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can...7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update7.5 High
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the...6.5 Medium
- ceph, redhat ceph storage, fedoraproject fedora +2 moreA flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a...5.3 Medium
- google tensorflowCHECK-fail in `LoadAndRemapMatrix`2.5 Low
- google tensorflowCHECK-fail in `tf.raw_ops.IRFFT`2.5 Low
- google tensorflowCHECK-fail in `tf.raw_ops.RFFT`2.5 Low
- google tensorflowLack of validation in `SparseDenseCwiseMul`2.5 Low
- google tensorflowCHECK-fail in `CTCGreedyDecoder`2.5 Low
- google tensorflowCHECK-failure in `UnsortedSegmentJoin`2.5 Low
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the...6.5 Medium
- avahiA flaw was found in avahi 0.8-5. A reachable assertion is present in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 morePossible denial of service scenario due to improper handling of group management action frame in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +244 more +246 moreDenial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +176 more +178 moreHistogram type KPI was teardown with the assumption of the existence of histogram binning info...7.5 High
- isc bind, debian linux, isc bind9 +12 more +14 moreA second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 High
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly6.5 Medium
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an...7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.7.5 High
- dht project dht, github.com/shiyanhui/dht +1 moreUncontrolled Resource Consumption in github.com/shiyanhui/dht7.5 High
- microsoft nbdkitA denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreDenial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data...7.5 High
- Show moreLoading…