CWE-617

Reachable Assertion

Parent: CWE-705 - Incorrect Control Flow Scoping

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

748 vulnerabilities with CWE-617
CVE-2022-23581 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via Grappler Optimizer SavedModel Manipulation
CVSS 6.5
CVE-2022-23579 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via Grappler Optimizer SafeToRemoveIdentity CHECK Failure
CVSS 6.5
CVE-2022-23572 MEDIUM
TensorFlow < 2.5.2 - Denial of Service via Shape Inference Type Specialization Failure
CVSS 6.5
CVE-2022-23571 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via Invalid Tensor Protobuf Decoding
CVSS 6.5
CVE-2022-23570 MEDIUM
TensorFlow < 2.5.2 - Reachable Assertion via Protobuf Tensor Decoding
CVSS 6.5
CVE-2022-23565 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel AttrDef Duplication
CVSS 6.5
CVE-2022-23564 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via Resource Handle Tensor Decoding
CVSS 6.5
CVE-2022-23569 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via CHECK Assertion Failures
CVSS 6.5
CVE-2022-22892 MEDIUM
jerryscript 3.0.0 - Reachable Assertion in ecma-helpers-value.c
CVSS 5.5
CVE-2022-22890 MEDIUM
jerryscript 3.0.0 - Reachable Assertion in Scanner Arguments Handling
CVSS 5.5
CVE-2021-1440 MEDIUM
Cisco IOS XR 4.3.0-7.3.1 - Unauthenticated Denial of Service via RPKI RTR Packet Handling
CVSS 6.8
CVE-2021-47351 MEDIUM
Linux Kernel 2.6.27 - Reachable Assertion in UBIFS xattr Operations
CVSS 5.5
CVE-2021-47315 MEDIUM
Linux kernel 3.3-4.4.276 - Memory Leak via fsl_ifc Probe Failure
CVSS 5.5
CVE-2021-47305 MEDIUM
Linux Kernel 4.9-4.14.241 - Reachable Assertion via DMA-BUF Sync File Merge Failure
CVSS 5.5
CVE-2021-46179 MEDIUM
UPX < 4.0.0 - Denial of Service via Crafted File in readx Function
CVSS 6.5
CVE-2021-31294 MEDIUM
Redis < 6.2.0 - Reachable Assertion via Replica SET Command
CVSS 5.9
CVE-2021-46784 MEDIUM
Squid 3.0-3.5.28, 4.x-4.17, <5.6 - Denial of Service via Gopher Server Response
CVSS 6.5
CVE-2021-3431 MEDIUM
Zephyr 2.5.0-2.5.9 - Reachable Assertion via LL_FEATURE_REQ
CVSS 4.3
CVE-2021-3430 MEDIUM
Zephyr 1.14.0-2.5.9 - Reachable Assertion via Repeated LL_CONNECTION_PARAM_REQ
CVSS 6.5
CVE-2021-35101 HIGH
Snapdragon Auto/Compute/Mobile - Info Disclosure
CVSS 7.1
CVE-2021-35073 HIGH
Snapdragon Auto- Snapdragon Compute - Info Disclosure
CVSS 7.5
CVE-2021-30340 HIGH
Qualcomm AR8035 and Multiple Firmware - Reachable Assertion in PDCCH Configuration
CVSS 7.5
CVE-2021-27500 HIGH
EIPStackGroup OpENer EtherNet/IP <Feb 10, 2021 - DoS
CVSS 7.5
CVE-2021-27498 HIGH
EIPStackGroup OpENer EtherNet/IP <Feb 10, 2021 - DoS
CVSS 7.5
CVE-2021-30332 HIGH
Qualcomm AR8035 Firmware - Reachable Assertion via OTA Configuration
CVSS 7.5
Details
Vulnerabilities 748