CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- the gnu c library glibcAssertion failure in the DNS stub resolver with a long search domain5.3 Medium
- internlm lmdeployInternLM LMDeploy through 0.17.0 Assertion Denial of Service8.7 High
- No product listedOpen5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion5.3 Medium
- isc bind 9Validating resolver can abort while caching a mismatched NOQNAME proof7.5 High
- isc bind 9named aborts on a TKEY query when the user configuration has no global options statement7.5 High
- arista networks eosSecurity Advisory 01727.0 High
- freerdpFreeRDP before 3.31.0 Denial of Service via URBDRC7.1 High
- freerdpFreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc7.1 High
- zephyrproject zephyrZephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS6.5 Medium
- dvidelabs flatccDvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion6.9 Medium
- dvidelabs flatccDvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion6.9 Medium
gpacUbuntuGPAC MP4Box lsr_dec.c lsr_exec_command_list assertion2.4 LowgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion2.4 LowgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_unregister assertion4.8 Medium- No product listedGPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion4.8 Medium
gpacUbuntuGPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion4.8 MediumgpacUbuntuGPAC MP4Box loader_xmt.c xmt_parse_element assertion4.8 Medium- libp2p libp2p-rendezvouslibp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses8.7 High
- nasa-jpl ion-dtnION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion8.7 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 morePersistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreInsufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUnauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members8.7 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 more$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars7.1 High
- No product listedA buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth...6.5 Medium
- ggml-org llama.cppggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion6.9 Medium
- the tcpdump group libpcapabort() in libpcap before 1.10.7 on an invalid BPF opcode5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read5.9 Medium
- strukturag libheiflibheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)4.3 Medium
- mongodb libmongocryptPersistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path7.1 High
- ggml llama.cppllama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.7.5 High
- mediatek mt2735 firmware, mt6833 firmware, mt6853 firmware +17 more +19 moreIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...5.3 Medium
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 moreIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...5.3 Medium
- No product listedOpen5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion5.3 Medium
- No product listedA reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS...7.5 High
- No product listedA reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers...7.5 High
- nlnet labs nsdRemote UDP DoS by sending multiple DNS Cookie options8.2 High
- No product listedOpen5GS HSS hss-cx-path.c assertion5.3 Medium
- wiresharkReachable Assertion in Wireshark3.1 Low
- apple ipados, macos, visionos +3 more +5 moreA reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18...6.5 Medium
- No product listedOpen5GS CER init.c diam_log_func assertion6.9 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos8.7 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service5.3 Medium
- red hat advanced cluster security 4, quay 3 +1 moreClaircore: claircore: denial of service via unchecked type assertion in rpm header parser4.3 Medium
- uhop node-re2node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length6.2 Medium
- ggml-org llama.cppggml-org llama.cpp Jinja Minja Template parser.cpp assertion4.8 Medium
- freerdpFreeRDP before 3.29.0 Denial of Service via serial DeviceControl5.3 Medium
- strukturag libheiflibheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)4.3 Medium
- strukturag libheiflibheif: Integer underflow in Fraction constructor via double clap transform application4.3 Medium
- Show moreLoading…