CWE-617

Reachable Assertion

Parent: CWE-705 - Incorrect Control Flow Scoping

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

794 vulnerabilities with CWE-617
CVE-2025-34458 HIGH
wb2osz/direwolf <1.8 - Assertion Failure
CVE-2025-14954 LOW
open5gs < 2.7.5 - Reachable Assertion in QER/FAR/URR/PDR Context Handling
CVSS 3.7
CVE-2025-65559 HIGH
Open5GS 2.7.5-49-g465e90f - Denial of Service via PFCP Session Establishment Request
CVSS 7.5
CVE-2025-59029 MEDIUM
PowerDNS Recursor - Crafted DNS Record Denial of Service
CVSS 5.3
CVE-2025-20792 MEDIUM
MediaTek NR15 - Remote Denial of Service via Rogue Base Station
CVSS 5.3
CVE-2025-20791 MEDIUM
MediaTek NR15 - Remote Denial of Service via Rogue Base Station Connection
CVSS 6.5
CVE-2025-20757 MEDIUM
MediaTek NR15 - Remote Denial of Service via Rogue Base Station Connection
CVSS 6.5
CVE-2025-20752 MEDIUM
MediaTek NR15 NR16 NR17 NR17R - Remote Denial of Service via Rogue Base Station
CVSS 6.5
CVE-2025-13644 MEDIUM
MongoDB Server 7.0.0-7.0.25, 8.0.0-8.0.12, 8.1.0-8.1.1 - Reachable Assertion during Batched Delete Operations
CVSS 6.5
CVE-2025-60632 MEDIUM
free5gc < 1.4.0 - Denial of Service via Npcf_BDTPolicyControl API
CVSS 6.5
CVE-2025-4321 HIGH
RS9116W < 2.12.1 - Denial of Service via Malformed L2CAP Packets
CVE-2025-47913 HIGH
go/ssh < 0.43.0 - Denial of Service via SSH_AGENT_SUCCESS Response
CVSS 7.5
CVE-2025-46705 HIGH
Entr'ouvert Lasso 2.5.1 and 2.8.2 - Denial of Service via Malformed SAML Assertion Response
CVSS 7.5
CVE-2025-47370 MEDIUM
Qualcomm AR8035 Firmware - Denial of Service via Invalid BT Connection Request
CVSS 6.5
CVE-2025-41068 HIGH
Open5GS < 2.7.6 - Denial of Service via Invalid NF Type in SBI
CVSS 7.5
CVE-2025-41067 HIGH
open5gs < 2.7.6 - Denial of Service via NRF Registry Deletion
CVSS 7.5
CVE-2025-59530 HIGH
quic-go < 0.49.0, 0.54.1 - Unauthenticated Denial of Service via Premature HANDSHAKE_DONE Frame
CVSS 7.5
CVE-2025-46149 MEDIUM
PyTorch 2.6.0-2.6.9 - Reachable Assertion in nn.Fold with Inductor
CVSS 5.3
CVE-2025-39803 HIGH
Linux Kernel 6.13-6.16.3 - Reachable Assertion in UFS UIC Command Completion Handler
CVSS 7.8
CVE-2025-39801 MEDIUM
Linux Kernel 3.2-6.16.4 DoS via Endpoint Command Timeout
CVSS 5.5
CVE-2025-39768 MEDIUM
Linux Kernel 6.16-6.16.3 - Reachable Assertion in Complex Rules Rehash Logic
CVSS 5.5
CVE-2025-38712 MEDIUM
Linux Kernel - Reachable Assertion in hfsplus_create_attributes_file
CVSS 5.5
CVE-2025-38701 MEDIUM
Linux Kernel - Reachable Assertion in ext4 Inline Data Handling
CVSS 5.5
CVE-2025-38690 MEDIUM
Linux Kernel 6.16-6.16.2 - Denial of Service via Recursive Bounce Buffer Allocation
CVSS 5.5
CVE-2025-9405 MEDIUM
Open5GS <2.7.5 - Reachable Assertion
CVSS 5.3
Details
Vulnerabilities 794