CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- cesanta mjsThere is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.5.5 Medium
- jsishThere is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.5.5 Medium
- jsishThere is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.5.5 Medium
- jerryscriptThere is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core...5.5 Medium
- jerryscriptThere is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) ||...5.5 Medium
- jerryscriptThere is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type !=...5.5 Medium
- jerryscriptThere is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at ...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base...5.5 Medium
- jerryscriptThere is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed...5.5 Medium
- jerryscriptThere is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at ...5.5 Medium
- jerryscriptThere is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in...5.5 Medium
- jerryscriptThere is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js...5.5 Medium
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array ...5.5 Medium
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p-...5.5 Medium
- jerryscriptThere is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c...5.5 Medium
- jerryscriptThere is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in...5.5 Medium
- jerryscriptThere is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar8035 firmware, csrb31024 firmware +84 more +86 morePossible denial of service due to improper validation of DNS response when DNS client requests...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 morePossible assertion due to improper validation of symbols configured for PDCCH monitoring in...7.5 High
- struktur libde265, debian linux +1 moreThere is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1...7.8 High
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar6003 firmware, ar8035 firmware +74 more +76 morePossible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +72 more +74 morePossible assertion due to improper handling of IPV6 packet with invalid length in destination...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm ar8031 firmware, ar8035 firmware +108 more +110 moreImproper validation of function pointer type with actual function signature can lead to assertion...7.5 High
- squid-cache squid, debian linux +1 moreImportant: squid:4 security update6.5 Medium
- niklasmerz cordova-plugin-fingerprint-aio, cordova plugin fingerprint all-in-one project plugin fingerprint all-in-one +1 moreDoS vulnerability6.2 Medium
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm:...7.5 High
- trend micro apex oneA reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, aqt1000 firmware +172 more +174 morePossible assertion in QOS request due to improper validation when multiple add or update request...8.4 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreUser may trigger invariant when allowed to send commands directly to shards6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +70 more +72 morePossible denial of service scenario due to improper input validation of received NAS OTA message...7.5 High
- google tensorflowIncomplete validation in `tf.summary.create_file_writer`5.5 Medium
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failure4.3 Medium
- f-secure internet gatekeeperDenial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper5.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +119 more +121 morePossible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon...7.5 High
- libjxl project libjxllibjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase:...7.5 High
- mz-automation lib60870A denial of service vulnerability exists in the ASDU message processing functionality of MZ...7.5 High
- nic knot resolverKnot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in...7.5 High
- torproject torTor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature...7.5 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreA too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use7.5 High
- live555liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application...5.5 Medium
- google tensorflow`std::abort` raised from `TensorListReserve` in TensorFlow5.5 Medium
- Show moreLoading…