CWE-617 · Reachable Assertion (page 5)
Page 5 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33199 | Medium | 5.3 | 2023-05-26 | Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of… |
CVE-2023-23759 | High | 7.5 | 2023-05-18 | There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client support… |
CVE-2023-31921 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c. |
CVE-2023-31920 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c. |
CVE-2023-31919 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c. |
CVE-2023-31918 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c. |
CVE-2023-31916 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c. |
CVE-2023-31913 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c. |
CVE-2023-2156 | High | 7.5 | 2023-05-09 | A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling o… |
CVE-2023-29935 | Medium | 5.5 | 2023-05-05 | llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced. |
CVE-2022-40504 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. |
CVE-2022-40508 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported. |
CVE-2022-34144 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling. |
CVE-2023-28856 | Medium | 5.5 | 2023-04-18 | Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that… |
CVE-2022-36440 | High | 7.5 | 2023-04-03 | A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and s… |
CVE-2023-28425 | Medium | 5.5 | 2023-03-20 | Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to… |
CVE-2023-27789 | High | 7.5 | 2023-03-16 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. |
CVE-2023-27788 | High | 7.5 | 2023-03-16 | An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. |
CVE-2023-27783 | High | 7.5 | 2023-03-16 | An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugin… |
CVE-2022-40527 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
CVE-2022-33272 | High | 7.5 | 2023-03-10 | Transient DOS in modem due to reachable assertion. |
CVE-2022-33254 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
CVE-2022-33250 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
CVE-2022-33244 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
CVE-2022-48363 | High | 7.5 | 2023-02-26 | In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving… |
CVE-2022-3924 | High | 7.5 | 2023-01-26 | This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value… |
CVE-2022-3488 | High | 7.5 | 2023-01-26 | Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND… |
CVE-2020-36562 | High | 7.5 | 2022-12-28 | Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector. |
CVE-2022-47516 | High | 7.5 | 2022-12-18 | An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a… |
CVE-2022-25702 | High | 7.5 | 2022-12-13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IO… |
CVE-2022-25692 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industria… |
CVE-2022-25691 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile |
CVE-2022-25689 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile |
CVE-2022-25675 | Medium | 5.5 | 2022-12-13 | Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Sn… |
CVE-2022-25673 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile |
CVE-2022-25672 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile |
CVE-2022-41901 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape with rank 0 will trigger a `CHECK` fail… |
CVE-2022-41899 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank 2 will trigger a `CHECK` fail in `SdcaO… |
CVE-2022-41893 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value for input `size`, it results `CHECK` fa… |
CVE-2022-25671 | High | 7.5 | 2022-11-15 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile |
CVE-2022-26446 | High | 7.5 | 2022-11-08 | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SI… |
CVE-2022-36016 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly t… |
CVE-2022-36012 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it crashe… |
CVE-2022-36005 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max` that is… |
CVE-2022-36004 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36003 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36002 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger a denial o… |
CVE-2022-36001 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives a `CHECK`… |
CVE-2022-35999 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), the current… |
CVE-2022-35998 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it gives a `CH… |
CVE-2022-35997 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHECK` fail th… |
CVE-2022-35995 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it gives a `CHECK… |
CVE-2022-35994 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that can be used… |
CVE-2022-35993 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` fails that… |
CVE-2022-35992 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gives a `CHE… |
CVE-2022-35991 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive an `element_shape` of a rank greater tha… |
CVE-2022-40755 | Medium | 5.5 | 2022-09-16 | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. |
CVE-2022-36026 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in a `CHECK`… |
CVE-2022-36019 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `max` tensors of a rank other than one, it… |
CVE-2022-36018 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` list that contains tensors of ranks other… |
CVE-2022-35990 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_channel_gradient` receives input `min` or `m… |
CVE-2022-35989 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` with dimensions greater than its input te… |
CVE-2022-35988 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, the GPU kernel gives a `CHECK` fail that… |
CVE-2022-35987 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either have the same shape as its input tenso… |
CVE-2022-35985 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CHECK` fail… |
CVE-2022-35984 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of type `int64`… |
CVE-2022-35983 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a `CHECK` fa… |
CVE-2022-35981 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with returning errors… |
CVE-2022-35971 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it results in a `CH… |
CVE-2022-35969 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. Otherwise… |
CVE-2022-35968 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`. This resu… |
CVE-2022-35963 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_… |
CVE-2022-35960 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of… |
CVE-2022-35959 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This… |
CVE-2022-35952 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id… |
CVE-2022-35941 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not checked. A nega… |
CVE-2022-35935 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (asserti… |
CVE-2022-35934 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-fa… |
CVE-2022-38496 | Medium | 5.5 | 2022-09-13 | LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp. |
CVE-2022-2520 | Medium | 6.5 | 2022-08-31 | A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a craft… |
CVE-2022-36522 | Medium | 6.5 | 2022-08-26 | Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability… |
CVE-2022-2719 | Medium | 5.5 | 2022-08-10 | In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This… |
CVE-2022-34967 | High | 7.5 | 2022-08-03 | The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. |
CVE-2021-46784 | Medium | 6.5 | 2022-07-17 | In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher… |
CVE-2022-32082 | High | 7.5 | 2022-07-01 | MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. |
CVE-2021-3431 | Medium | 4.3 | 2022-06-28 | Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com… |
CVE-2021-3430 | Medium | 6.5 | 2022-06-28 | Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://gi… |
CVE-2022-31100 | Medium | 6.5 | 2022-06-27 | rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack… |
CVE-2022-33069 | Medium | 5.5 | 2022-06-23 | Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment() at SMTEncoder.cpp. |
CVE-2022-33024 | High | 7.5 | 2022-06-23 | There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: dec… |
CVE-2022-31009 | Medium | 5.7 | 2022-06-23 | wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partia… |
CVE-2022-34000 | Medium | 6.5 | 2022-06-19 | libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.cc. |
CVE-2021-35101 | High | 7.1 | 2022-06-14 | Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
CVE-2021-35073 | High | 7.5 | 2022-06-14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… |
CVE-2021-30340 | High | 7.5 | 2022-06-14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2022-32978 | Medium | 6.5 | 2022-06-10 | There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan. |
CVE-2022-29228 | High | 7.5 | 2022-06-09 | Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitt… |
CVE-2022-31651 | Medium | 5.5 | 2022-05-25 | In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. |
CVE-2022-31620 | Medium | 6.5 | 2022-05-25 | In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds arra… |
CVE-2022-29213 | Medium | 5.5 | 2022-05-21 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `tf.compat.v… |