CWE-617

Reachable Assertion

Parent: CWE-705 - Incorrect Control Flow Scoping

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

748 vulnerabilities with CWE-617
CVE-2026-31398 HIGH
mm/rmap: fix incorrect pte restoration for lazyfree folios
CVSS 7.8
CVE-2026-30867 MEDIUM
CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing
CVSS 5.7
CVE-2026-34219 MEDIUM
libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow
CVSS 5.9
CVE-2026-33977 MEDIUM
FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)
CVSS 6.5
CVE-2026-33952 MEDIUM
FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks
CVSS 6.5
CVE-2026-4046 HIGH
iconv crash due to assertion failure with untrusted input
CVSS 7.5
CVE-2026-5170 MEDIUM
Users could trigger a crash of mongod primaries during promotion to sharded
CVSS 5.3
CVE-2026-3119 MEDIUM
Authenticated query containing a TKEY record may cause named to terminate unexpectedly
CVSS 6.5
CVE-2026-23356 MEDIUM
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
CVSS 5.5
CVE-2026-3608 HIGH
ISC Kea - Stack Overflow Denial of Service
CVSS 7.5
CVE-2026-23555 HIGH
Xenstored DoS by unprivileged domain
CVSS 7.1
CVE-2026-27135 HIGH
nghttp2 Denial of service: Assertion failure due to the missing state validation
CVSS 7.5
CVE-2026-23238 MEDIUM
Linux Kernel 2.6.12.1-5.10.251 - Reachable Assertion via romfs sb_set_blocksize Failure
CVSS 5.5
CVE-2026-27809 CRITICAL
psd-tools < 1.12.2 - Denial of Service via Malformed RLE-Compressed Image Data
CVSS 9.1
CVE-2026-27015 MEDIUM
FreeRDP < 3.23.0 - Denial of Service via Smartcard Read Size Alignment Bounds Check
CVSS 6.5
CVE-2026-2523 MEDIUM
open5gs < 2.7.6 - Reachable Assertion in SMF GN Handler
CVSS 5.3
CVE-2026-25610 MEDIUM
MongoDB 7.0.0-7.0.28 - Authenticated Denial of Service via $geoNear Pipeline with Invalid Index Hints
CVSS 6.5
CVE-2026-23067 MEDIUM
Linux Kernel 6.16-6.18.8 - Reachable Assertion via IOVA Address Overflow in IOMMU Unmap Path
CVSS 5.5
CVE-2026-20422 MEDIUM
MediaTek Modem - Input Validation Denial of Service
CVSS 6.5
CVE-2026-20405 MEDIUM
MediaTek Modem - Bounds Check Denial of Service
CVSS 6.5
CVE-2026-20401 HIGH
MediaTek NR15 and MT Series - Remote Denial of Service via Rogue Base Station
CVSS 7.5
CVE-2026-1738 MEDIUM
open5gs < 2.7.6 - Reachable Assertion in SGWC Tunnel Addition
CVSS 5.3
CVE-2026-1737 MEDIUM
open5gs < 2.7.6 - Reachable Assertion in CreateBearerRequest Handler
CVSS 5.3
CVE-2026-1736 MEDIUM
Open5GS <2.7.6 - Reachable Assertion
CVSS 5.3
CVE-2026-24826 CRITICAL
cadaver turso3d - Memory Safety and Divide-by-Zero Flaws
Details
Vulnerabilities 748