VYPR

CWE-617

Reachable Assertion

BaseDraft

Description

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (812)

page 9 of 41
  • CVE-2021-35073HigJun 14, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30340HigJun 14, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2022-1183HigMay 19, 2022
    Isc
    Bind
    risk 0.49cvss 7.5epss 0.06

    On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and…

  • CVE-2021-27500HigMay 12, 2022
    EIPStackGroup
    Opener
    risk 0.49cvss 7.5epss 0.01

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

  • CVE-2021-27498HigMay 12, 2022
    EIPStackGroup
    Opener
    risk 0.49cvss 7.5epss 0.01

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

  • CVE-2022-27448HigApr 14, 2022
    MariaDB
    MariaDB
    risk 0.49cvss 7.5epss 0.02

    There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.

  • CVE-2022-27382HigApr 12, 2022
    MariaDB
    MariaDB
    risk 0.49cvss 7.5epss 0.02

    MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.

  • CVE-2021-30332HigApr 1, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30329HigApr 1, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30328HigApr 1, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2022-0635HigMar 23, 2022
    Isc
    Bind
    risk 0.49cvss 7.5epss 0.01

    Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.

  • CVE-2022-0667HigMar 22, 2022
    Isc
    Bind
    risk 0.49cvss 7.5epss 0.01

    When the vulnerability is triggered the BIND process will exit. BIND 9.18.0

  • CVE-2021-30326HigFeb 11, 2022
    Qualcomm
    Snapdragon Compute
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30353HigJan 13, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-30307HigJan 13, 2022
    Snapdragon
    Snapdragon Auto
    risk 0.49cvss 7.5epss 0.01

    Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-30287HigJan 13, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30293HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-30273HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-45290HigDec 21, 2021
    Webassembly
    Binaryen
    risk 0.49cvss 7.5epss 0.01

    A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.

  • CVE-2021-1982HigNov 12, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile