CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- libsndfile project libsndfilelibsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in...6.5 Medium
- linux, linux kernel +1 morebtrfs: don't readahead the relocation inode on RST7.0 High
- oisf suricataSuricata ja4: invalid alpn leads to panic7.5 High
- oisf suricataSuricata detect/datasets: reachable assertion with unimplemented rule option7.5 High
- dena quiclyQuicly assertion failures7.5 High
- dena h2oH2O assertion failure when HTTP/3 requests are cancelled3.7 Low
- bytecodealliance wasmtimeWasmtime runtime crash when combining tail calls with trapping imports5.5 Medium
- mediatek mt2735, mt6833, mt6853 +19 more +21 moreIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...7.5 High
- linux, linux kernel +1 moretcp: add accessors to read/set tp->snd_cwnd7.5 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: usb: assertion failure in usb_ep_get()5.5 Medium
- linux, linux kernel +1 morebtrfs: handle errors from btrfs_dec_ref() properly5.5 Medium
- red hat enterprise linux ai (rhel ai)Vllm: a completions api request with an empty prompt will crash the vllm api server.7.5 High
- linux, linux kernel +1 morejbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted5.5 Medium
- linux, linux kernel +1 moreext4: fix bug_on ext4_mb_use_inode_pa5.5 Medium
- linux, linux kernel +1 moreext4: fix bug_on in __es_tree_search5.5 Medium
- linux, linux kernel +1 moreext4: fix bug_on in ext4_writepages5.5 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Fix warning message due to adisc being flushed5.5 Medium
- linux, linux kernel +1 moreALSA: ymfpci: Fix BUG_ON in probe function5.5 Medium
- linux, linux kernel +1 moreice: Fix call trace with null VSI during VF reset5.5 Medium
- linux, linux kernel +1 moreclosures: Change BUG_ON() to WARN_ON()5.5 Medium
- linux, linux kernel +1 moremm: page_ref: remove folio_try_get_rcu()5.5 Medium
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +23 more +25 moreReachable Assertion in Multi Mode Call Processor6.5 Medium
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 moreA vulnerability has been found in Dahua products. Attackers can send carefully crafted data...7.5 High
- linux, linux kernel +1 morenet: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new7.5 High
- linux, linux kernel +1 morenetfilter: nfnetlink_queue: drop bogus WARN_ON5.5 Medium
- isc bind, bind 9 +1 moreAssertion failure when serving both stale cache data and authoritative zone content7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: core: remove unnecessary WARN_ON() in implement()5.5 Medium
- linux, linux kernel +1 moresock_map: avoid race between sock_map_close and sk_psock_put7.8 High
- linux, linux kernel +1 moredrm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)5.5 Medium
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted phonenumber inputs8.6 High
- linux, linux kernel +1 morebtrfs: protect folio::private when attaching extent buffer folios7.8 High
- linux, linux kernel +1 morecpu/hotplug: Don't offline the last non-isolated CPU5.5 Medium
- linux, linux kernel +1 moreubifs: Fix races between xattr_{set|get} and listxattr operations7.8 High
- linux, linux kernel +1 morememory: fsl_ifc: fix leak of IO mapping on probe failure5.5 Medium
- linux, linux kernel +1 moredma-buf/sync_file: Don't leak fences on merge failure5.5 Medium
- linux, linux kernel +1 moremm/hugetlb: fix missing hugetlb_lock for resv uncharge5.5 Medium
- linux, linux kernel +1 moreiommu/vt-d: Fix WARN_ON in iommu probe path5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudp: do not accept non-tunnel GSO skbs landing in a tunnel9.8 Critical
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdc5.3 Medium
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +159 more +161 moreReachable Assertion in Data Modem7.5 High
- open5gsOpen5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS...7.5 High
- linux, linux kernel +1 morekprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/i915/gt: Reset queue_priority_hint on parking5.5 Medium
- linux, linux kernel +1 moredrm/gma500: Fix WARN_ON(lock->magic != lock) error5.5 Medium
- gnu glibc, debian linux, netapp h300s firmware +11 more +13 morenscd: netgroup cache may terminate daemon on memory allocation failure7.3 High
- bellard quickjs, ubuntu +1 moreQuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime...4.0 Medium
- jerryscriptJerryscript commit cefd391 was discovered to contain an Assertion Failure via...6.2 Medium
- jasper project jasperIn Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an...7.5 High
- envoyproxy envoyEnvoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes7.5 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: net: assertion failure in update_sctp_checksum()5.5 Medium
- Show moreLoading…