CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- envoyproxy envoyReachable assertion in Envoy7.5 High
- libjpeg project libjpegIn libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may...6.5 Medium
- sound exchange project exchangeIn SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.5.5 Medium
- rulex-rs rulex, pomsky-lang pomsky +1 moreReachable Assertion in rulex6.5 Medium
- google tensorflowIncomplete validation in signal ops leads to crashes in TensorFlow5.5 Medium
- isc bind, bind9, netapp h300s firmware +4 more +6 moreDestroying a TLS session early causes assertion failure7.5 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Reachable Assertion7.5 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Reachable Assertion7.5 High
- saitoha libsixelThere is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel...6.5 Medium
- gpacIn GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash in response to unexpected requests6.5 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability6.8 Medium
- mariadb, debian linux +1 moreThere is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos ==...7.5 High
- mariadbMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +46 more +48 morePossible assertion due to improper validation of invalid NR CSI-IM resource configuration in...7.5 High
- libsixelstb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a...5.5 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.5.5 Medium
- grpc grpc-swift, linuxfoundation grpc swift +1 moreDenial of Service via reachable assertion in grpc-swift7.5 High
- broadcom tcpreplaytcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in...5.5 Medium
- isc bind, netapp h300e firmware, h300s firmware +6 more +8 moreAssertion failure on delayed DS lookup7.5 High
- isc bind, netapp h300e firmware, h300s firmware +6 more +8 moreVersions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific...7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreReachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via...5.5 Medium
- tsmuxer project tsmuxerThere is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of...5.5 Medium
- jerryscriptThere is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper size validation while processing the DownlinkPreemption IE in...7.5 High
- broadcom tcpreplaytcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.5.5 Medium
- broadcom tcpreplaytcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c5.5 Medium
- google tensorflowNull-dereference in Tensorflow6.5 Medium
- google tensorflowReachable Assertion in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in Tensorflow6.5 Medium
- google tensorflowReachable Assertion in Tensorflow6.5 Medium
- google tensorflowCrash when type cannot be specialized in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow6.5 Medium
- google tensorflow`CHECK`-fails due to attempting to build a reference tensor in Tensorflow6.5 Medium
- google tensorflowMultiple `CHECK`-fails in `function.cc` in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in binary ops in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in `TensorByteSize` in Tensorflow6.5 Medium
- google tensorflowAssertion failure based denial of service in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in Tensorflow6.5 Medium
- google tensorflow`CHECK`-fails when building invalid tensor shapes in Tensorflow6.5 Medium
- mariadbMariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a...5.5 Medium
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS...5.5 Medium
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in...5.5 Medium
- cesanta mjsThere is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta...5.5 Medium
- cesanta mjsThere is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.5.5 Medium
- cesanta mjsThere is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc...5.5 Medium
- Show moreLoading…