CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: avoid overflows in ip6_datagram_send_ctl()5.5 Medium
- avahiAvahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon5.5 Medium
- linux, linux kernel +1 moremm/rmap: fix incorrect pte restoration for lazyfree folios7.8 High
- emqx cocoamqttCocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing5.7 Medium
- freerdpFreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks6.0 Medium
- freerdpFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)6.9 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreiconv crash due to assertion failure with untrusted input7.5 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUsers could trigger a crash of mongod primaries during promotion to sharded6.0 Medium
- protocol libp2p-gossipsub, libp2p rust-libp2p +1 morelibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow8.2 High
- linux, linux kernel +1 moretracing: Fix WARN_ON in tracing_buffers_mmap_close5.5 Medium
- linux, linux kernel +1 moremm: thp: deny THP for files on anonymous inodes5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()5.5 Medium
- isc kea, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 moreStack overflow in Kea daemons7.5 High
- isc bind, bind 9 +1 moreAuthenticated query containing a TKEY record may cause named to terminate unexpectedly6.5 Medium
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validation7.5 High
- xenXenstored DoS by unprivileged domain7.1 High
- protocol yamux, libp2p rust-yamux +1 moreYamux remote Panic via malformed Data frame with SYN set and len = 2621458.7 High
- quickjs project quickjsA crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09...6.5 Medium
- python-markdown markdown, red hat external secrets operator for red hat openshift, multicluster engine for kubernetes +27 more +29 morePython-Markdown has an Uncaught Exception7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +2 moreromfs: check sb_set_blocksize() return value5.5 Medium
- qualcomm 5g fixed wireless access platform firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +41 more +43 moreReachable Assertion in FW6.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 moreReachable Assertion in Modem6.5 Medium
- psd-toolspsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps6.8 Medium
- freerdpFreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)5.0 Medium
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 9 +2 moreValkey has Pre-Authentication DOS from malformed RESP request7.5 High
- open5gsOpen5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion6.9 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- mongodb inc server, mongodb, mongodb, inc. mongodb server +2 moreInvalid $geoNear index hint may cause server crash7.1 High
- silabs simplicity software development kit, silabs.com emberznet sdk +1 moreTruncated 802.15.4 packet leads to denial of service5.3 Medium
- linux, linux kernel +1 moreiommu/io-pgtable-arm: fix size_t signedness bug in unmap path5.5 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...6.5 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to improper input validation. This could lead to...6.5 Medium
- mediatek nr15, mediatek, inc. mediatek chipset +1 moreIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...7.5 High
- open5gsOpen5GS SGWC context.c sgwc_tunnel_add assertion6.9 Medium
- open5gsOpen5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion6.9 Medium
- open5gsOpen5GS SGWC s11-handler.c assertion6.9 Medium
- openvpnInsufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote...3.8 Low
- cadaver turso3dOut-of-bounds write in turso3d10.0 Critical
- linux, linux kernel +1 morelibceph: replace overzealous BUG_ON in osdmap_apply_incremental()7.5 High
- theupdateframework go-tufgo-tuf affected by client DoS via malformed server response5.9 Medium
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedly7.5 High
- h2o quiclyQuicly has assertion failures7.5 High
- open5gsOpen5GS context.c sgwc_bearer_add assertion6.9 Medium
- open5gsOpen5GS s11-handler.c assertion6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 High
- linux, linux kernel +1 moreipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT7.5 High
- avahiAvahi has a reachable assertion in lookup_start6.5 Medium
- avahiAvahi has a reachable assertion in lookup_multicast_callback6.5 Medium
- Show moreLoading…