CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- pterodactyl wingsWings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5 High
- tomaka rouilleRouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encoding8.2 High
- hdfgroup hdf5NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag5.2 Medium
- ggml-org whisper.cppggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion4.8 Medium
- the libreswan project libreswanFIPS mode assertion failure via malicious CERT payload7.5 High
- libeventLibevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept8.4 High
- linux, linux kernel +1 moreNTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR5.5 Medium
- apache nimbleApache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler7.5 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreServer crash via aggregation pipeline expression with compound wildcard index specification7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreTransaction Command Insufficient Input Validation Leading to Process Termination7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreFind command with $meta sort can lead to crash7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreMongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination5.3 Medium
- isc bind, bind 9 +1 moreUnexpected exit in certain situations with NSEC and NSEC3 both present7.5 High
- isc bind, bind 9 +1 moreRecord ordering based unexpected exit with CNAME or DNAME7.5 High
- isc bind, bind 9 +1 moreKey Record using PRIVATEDNS algorithm may lead to unexpected exit6.5 Medium
- nlnet labs unboundAssertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments5.9 Medium
- zephyrproject zephyrDoS (hard fault) in NXP LPUART driver: unsupported runtime UART config leaves clocks disabled5.5 Medium
- elastic elasticsearchReachable Assertion in Elasticsearch Leading to Denial of Service6.5 Medium
- linux, linux kernel +1 moreKVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()7.1 High
- h2o quiclyQuicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB7.5 High
- nvidia tensorrt-llmNVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an...6.2 Medium
- csa-iot matterA reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in...5.7 Medium
- csa-iot matterA reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2,...5.7 Medium
- csa-iot matterA reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4,...5.7 Medium
- samsung open source escargotOut-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows...6.1 Medium
- academysoftwarefoundation openexrOpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)7.1 High
- vllmvLLM denial of service via prompt embeds on M-RoPE models7.1 High
- openvpnOpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to...5.9 Medium
- libreswanIKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload7.5 High
- libreswanIKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload7.5 High
- libreswanIKEv2 Denial of Service via malformed fragmentation7.5 High
- zcashfoundation zebraZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book7.5 High
- zcashfoundation zebraZebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC7.1 High
- linux, linux kernel +1 moreblk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()5.5 Medium
- linux, linux kernel +1 morenet: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED5.5 Medium
- schneider electric powerlogic™ p7, schneider-electric powerlogic p7 firmware +1 moreCWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to...6.9 Medium
- silabs emberznetColor Control color-temperature assertion abort in EmberZNet v9.0.27.1 High
- silabs emberznetColor Control hue/saturation assertion abort in EmberZNet v9.0.27.1 High
- linux, linux kernel +1 moreaccel/ethosu: reject NPU_OP_RESIZE commands from userspace5.5 Medium
- linux, linux kernel +1 moreocfs2: validate group add input before caching5.5 Medium
- linux, linux kernel +1 moreceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 Medium
- linux, linux kernel +1 morelibceph: handle rbtree insertion error in decode_choose_args()7.5 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset8.8 High
- zephyrproject zephyrOut-of-bounds read in Bluetooth Classic SDP attribute parsing (`bt_sdp_parse_attribute`)7.1 High
- openbaoOpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types6.5 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreGstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion6.5 Medium
- dahua ipc/sd/nvr/xvr/evs/vto/vth/asi/tpcA vulnerability has been found in some Dahua products could allow an unauthenticated remote...8.7 High
- dahua ipc/sdA vulnerability has been found in some Dahua products could allow an authenticated remote...6.9 Medium
- Show moreLoading…