CWE-617 · Reachable Assertion (page 3)
Page 3 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68471 | Medium | 6.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashe… |
CVE-2025-68468 | Medium | 6.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashe… |
CVE-2025-68276 | Medium | 5.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local user… |
CVE-2025-20762 | Medium | 6.5 | 2026-01-06 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20760 | Medium | 6.5 | 2026-01-06 | In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected… |
CVE-2025-15176 | Medium | 5.3 | 2025-12-29 | A flaw has been found in Open5GS up to 2.7.5. This affects the function decode_ipv6_header/ogs_pfcp_pdr_rule_find_by_packet of the file lib/pfcp/rule-match.c o… |
CVE-2025-66443 | High | 7.5 | 2025-12-25 | Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that… |
CVE-2025-66379 | High | 7.5 | 2025-12-25 | Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted medi… |
CVE-2025-49088 | Medium | 5.9 | 2025-12-25 | Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the… |
CVE-2025-48704 | High | 7.5 | 2025-12-25 | Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a de… |
CVE-2025-32096 | High | 7.5 | 2025-12-25 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a den… |
CVE-2025-32095 | High | 7.5 | 2025-12-25 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling messa… |
CVE-2025-34458 | | 2025-12-22 | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder fu… | |
CVE-2025-14954 | Low | 3.7 | 2025-12-19 | A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or_add/ogs_… |
CVE-2025-65559 | High | 7.5 | 2025-12-18 | An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with a reachable assertio… |
CVE-2025-59029 | Medium | 5.3 | 2025-12-09 | An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with… |
CVE-2025-20792 | Medium | 5.3 | 2025-12-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20791 | Medium | 6.5 | 2025-12-02 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20757 | Medium | 6.5 | 2025-12-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20752 | Medium | 6.5 | 2025-12-02 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2025-13644 | Medium | 6.5 | 2025-11-25 | MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assume… |
CVE-2025-60632 | Medium | 6.5 | 2025-11-24 | An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl AP… |
CVE-2025-4321 | | 2025-11-17 | In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the dev… | |
CVE-2025-47913 | High | 7.5 | 2025-11-13 | SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. |
CVE-2025-46705 | High | 7.5 | 2025-11-05 | A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion… |
CVE-2025-47370 | Medium | 6.5 | 2025-11-04 | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
CVE-2025-41068 | High | 7.5 | 2025-10-27 | Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is achieved b… |
CVE-2025-41067 | High | 7.5 | 2025-10-27 | Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request tha… |
CVE-2025-59530 | High | 7.5 | 2025-10-10 | quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-… |
CVE-2023-53683 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WAR… |
CVE-2023-53607 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Fix BUG_ON in probe function The snd_dma_buffer.bytes field now contains th… |
CVE-2023-53584 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process There are two stat… |
CVE-2023-53564 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2_ioctl_move_extents ocfs2… |
CVE-2023-53450 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the… |
CVE-2023-53448 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Removed unneeded release_mem_region Remove unnecessary release_mem_region f… |
CVE-2025-46149 | Medium | 5.3 | 2025-09-25 | In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error. |
CVE-2023-53339 | Medium | 5.5 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix BUG_ON condition in btrfs_cancel_balance Pausing and canceling balance can rac… |
CVE-2023-53323 | Medium | 5.5 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned PAGE_ALIGN(x) macro gives the next hi… |
CVE-2022-50340 | Medium | 5.5 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimc_init() fails In vimc_init(), when platfo… |
CVE-2023-53247 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand While trying to get t… |
CVE-2022-50293 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range If we get -ENOMEM… |
CVE-2025-39803 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() The UIC completio… |
CVE-2025-39801 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a ra… |
CVE-2025-39768 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from matcher to matcher s… |
CVE-2025-38712 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header co… |
CVE-2025-38701 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image trigge… |
CVE-2025-38690 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent infinite recursion If the buf + offset is not aligned to XE_CAHEL… |
CVE-2025-9405 | Medium | 5.3 | 2025-08-25 | A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipula… |
CVE-2025-9403 | Low | 3.3 | 2025-08-25 | A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing mani… |
CVE-2025-38642 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix WARN_ON for monitor mode on some devices On devices without WANT_MONI… |
CVE-2025-9301 | Low | 3.3 | 2025-08-21 | A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx… |
CVE-2025-38544 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using AF_RXRPC to provide a se… |
CVE-2025-38503 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with… |
CVE-2025-30034 | Medium | 6.2 | 2025-08-12 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected devices do not properly validate input sent to its listeni… |
CVE-2025-8836 | Low | 3.3 | 2025-08-11 | A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the compo… |
CVE-2025-8804 | Medium | 5.3 | 2025-08-10 | A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The ma… |
CVE-2025-8698 | Low | 3.3 | 2025-08-07 | A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_nsmf_pdusession_handle_release_sm_context… |
CVE-2025-27073 | High | 7.5 | 2025-08-06 | Transient DOS while creating NDP instance. |
CVE-2025-27066 | High | 7.5 | 2025-08-06 | Transient DOS while processing an ANQP message. |
CVE-2025-21452 | High | 7.5 | 2025-08-06 | Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network. |
CVE-2025-8537 | Low | 3.7 | 2025-08-05 | A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetDataSize of th… |
CVE-2025-50422 | Low | 2.9 | 2025-08-04 | Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c. |
CVE-2025-54350 | Low | 3.7 | 2025-08-03 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. |
CVE-2024-42645 | High | 7.5 | 2025-07-29 | An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service (DoS). |
CVE-2024-42644 | High | 7.5 | 2025-07-29 | FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publis… |
CVE-2025-46354 | High | 7.5 | 2025-07-22 | A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted netwo… |
CVE-2025-36512 | High | 7.5 | 2025-07-22 | A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol b… |
CVE-2025-40777 | High | 7.5 | 2025-07-16 | If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other… |
CVE-2025-7485 | Low | 3.3 | 2025-07-12 | A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_recv_handler/s1ap_recv_handler/… |
CVE-2025-52964 | Medium | 6.5 | 2025-07-11 | A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-b… |
CVE-2025-52958 | Medium | 5.3 | 2025-07-11 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated … |
CVE-2025-24798 | Medium | 4.3 | 2025-07-10 | Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a c… |
CVE-2025-49630 | High | 7.5 | 2025-07-10 | In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients… |
CVE-2025-38285 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID… |
CVE-2025-38223 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test… |
CVE-2025-6952 | Low | 3.3 | 2025-07-01 | A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_operational of the file… |
CVE-2025-6536 | Low | 3.3 | 2025-06-24 | A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the lib… |
CVE-2025-6497 | Low | 3.3 | 2025-06-23 | A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/pa… |
CVE-2025-6273 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-read… |
CVE-2022-50126 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted Following pr… |
CVE-2022-50062 | High | 7.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: bgmac: Fix a BUG triggered by wrong bytes_compl On one of our machines we got: kern… |
CVE-2022-50041 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix call trace with null VSI during VF reset During stress test with attaching and d… |
CVE-2025-38066 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUG_ON by blocking retries on failed device resumes A cache device fail… |
CVE-2025-5520 | Medium | 5.3 | 2025-06-03 | A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmm_state_authentication/emm_state_authentica… |
CVE-2025-5501 | Medium | 5.3 | 2025-06-03 | A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_tran… |
CVE-2025-37930 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a… |
CVE-2025-37897 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release plfxlc_mac_release() asserts… |
CVE-2025-37878 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init Move the get_ctx(child_ct… |
CVE-2025-37864 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in many places such as c… |
CVE-2025-20666 | High | 7.5 | 2025-05-05 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base sta… |
CVE-2025-47229 | Low | 2.9 | 2025-05-03 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted… |
CVE-2022-49879 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG_ON() when directory entry has invalid rec_len The rec_len field in the dire… |
CVE-2022-49778 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud The page table check trigger… |
CVE-2025-29339 | High | 7.5 | 2025-04-22 | An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Se… |
CVE-2025-38637 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the current implementation… |
CVE-2025-31160 | Low | 2.9 | 2025-03-26 | atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by… |
CVE-2025-21754 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion failure when splitting ordered extent after transaction abort If whi… |
CVE-2025-21721 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that nilfs_prepare_chunk() may return Patch series "nilfs2: fix iss… |
CVE-2022-49708 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: =====================… |
CVE-2022-49409 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search Hulk Robot reported a BUG_ON: ======================… |