CWE-617 · Reachable Assertion (page 6)
Page 6 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35999 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), the current… |
CVE-2022-35998 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it gives a `CH… |
CVE-2022-35997 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHECK` fail th… |
CVE-2022-35995 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it gives a `CHECK… |
CVE-2022-35994 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that can be used… |
CVE-2022-35993 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` fails that… |
CVE-2022-35992 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gives a `CHE… |
CVE-2022-35991 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive an `element_shape` of a rank greater tha… |
CVE-2022-40755 | Medium | 5.5 | 2022-09-16 | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. |
CVE-2022-36026 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in a `CHECK`… |
CVE-2022-36019 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `max` tensors of a rank other than one, it… |
CVE-2022-36018 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` list that contains tensors of ranks other… |
CVE-2022-35990 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_channel_gradient` receives input `min` or `m… |
CVE-2022-35989 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` with dimensions greater than its input te… |
CVE-2022-35988 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, the GPU kernel gives a `CHECK` fail that… |
CVE-2022-35987 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either have the same shape as its input tenso… |
CVE-2022-35985 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CHECK` fail… |
CVE-2022-35984 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of type `int64`… |
CVE-2022-35983 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a `CHECK` fa… |
CVE-2022-35981 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with returning errors… |
CVE-2022-35971 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it results in a `CH… |
CVE-2022-35969 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. Otherwise… |
CVE-2022-35968 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`. This resu… |
CVE-2022-35963 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_… |
CVE-2022-35960 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of… |
CVE-2022-35959 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This… |
CVE-2022-35952 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id… |
CVE-2022-35941 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not checked. A nega… |
CVE-2022-35935 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (asserti… |
CVE-2022-35934 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-fa… |
CVE-2022-38496 | Medium | 5.5 | 2022-09-13 | LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp. |
CVE-2022-2520 | Medium | 6.5 | 2022-08-31 | A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a craft… |
CVE-2022-36522 | Medium | 6.5 | 2022-08-26 | Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability… |
CVE-2022-2719 | Medium | 5.5 | 2022-08-10 | In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This… |
CVE-2022-34967 | High | 7.5 | 2022-08-03 | The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. |
CVE-2021-46784 | Medium | 6.5 | 2022-07-17 | In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher… |
CVE-2022-32082 | High | 7.5 | 2022-07-01 | MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. |
CVE-2021-3431 | Medium | 4.3 | 2022-06-28 | Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com… |
CVE-2021-3430 | Medium | 6.5 | 2022-06-28 | Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://gi… |
CVE-2022-31100 | Medium | 6.5 | 2022-06-27 | rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack… |
CVE-2022-33069 | Medium | 5.5 | 2022-06-23 | Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment() at SMTEncoder.cpp. |
CVE-2022-33024 | High | 7.5 | 2022-06-23 | There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: dec… |
CVE-2022-31009 | Medium | 5.7 | 2022-06-23 | wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partia… |
CVE-2022-34000 | Medium | 6.5 | 2022-06-19 | libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.cc. |
CVE-2021-35101 | High | 7.1 | 2022-06-14 | Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
CVE-2021-35073 | High | 7.5 | 2022-06-14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… |
CVE-2021-30340 | High | 7.5 | 2022-06-14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2022-32978 | Medium | 6.5 | 2022-06-10 | There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan. |
CVE-2022-29228 | High | 7.5 | 2022-06-09 | Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitt… |
CVE-2022-31651 | Medium | 5.5 | 2022-05-25 | In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. |
CVE-2022-31620 | Medium | 6.5 | 2022-05-25 | In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds arra… |
CVE-2022-29213 | Medium | 5.5 | 2022-05-21 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `tf.compat.v… |
CVE-2022-1183 | High | 7.5 | 2022-05-19 | On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that includ… |
CVE-2021-27500 | High | 7.5 | 2022-05-12 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serv… |
CVE-2021-27498 | High | 7.5 | 2022-05-12 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serv… |
CVE-2022-29977 | Medium | 6.5 | 2022-05-11 | There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability… |
CVE-2022-29339 | High | 7.5 | 2022-05-05 | In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability… |
CVE-2022-24272 | Medium | 6.5 | 2022-04-21 | An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mong… |
CVE-2022-20694 | Medium | 6.8 | 2022-04-15 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote… |
CVE-2022-27448 | High | 7.5 | 2022-04-14 | There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. |
CVE-2022-27382 | High | 7.5 | 2022-04-12 | MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order. |
CVE-2021-30332 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… |
CVE-2021-30329 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… |
CVE-2021-30328 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2022-27939 | Medium | 5.5 | 2022-03-26 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. |
CVE-2022-27938 | Medium | 5.5 | 2022-03-26 | stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw. |
CVE-2022-24777 | High | 7.5 | 2022-03-25 | grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift server is vulnerable to… |
CVE-2022-0635 | High | 7.5 | 2022-03-23 | Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a f… |
CVE-2022-25484 | Medium | 5.5 | 2022-03-22 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. |
CVE-2022-0667 | High | 7.5 | 2022-03-22 | When the vulnerability is triggered the BIND process will exit. BIND 9.18.0 |
CVE-2022-0865 | Medium | 5.5 | 2022-03-10 | Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sourc… |
CVE-2021-45861 | Medium | 5.5 | 2022-03-02 | There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277. |
CVE-2022-22901 | Medium | 5.5 | 2022-02-17 | There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryS… |
CVE-2021-45387 | Medium | 5.5 | 2022-02-11 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c. |
CVE-2021-45386 | Medium | 5.5 | 2022-02-11 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c |
CVE-2021-30326 | High | 7.5 | 2022-02-11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, S… |
CVE-2022-23588 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer… |
CVE-2022-23586 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `fun… |
CVE-2022-23583 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op woul… |
CVE-2022-23582 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` w… |
CVE-2022-23581 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedMode… |
CVE-2022-23579 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedMode… |
CVE-2022-23572 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is… |
CVE-2022-23571 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` asserti… |
CVE-2022-23570 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mut… |
CVE-2022-23565 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk suc… |
CVE-2022-23564 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a… |
CVE-2022-23569 | Medium | 6.5 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e… |
CVE-2021-46666 | Medium | 5.5 | 2022-02-01 | MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause. |
CVE-2021-46517 | Medium | 5.5 | 2022-01-27 | There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0. |
CVE-2021-46515 | Medium | 5.5 | 2022-01-27 | There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0. |
CVE-2021-46514 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0. |
CVE-2021-46511 | Medium | 5.5 | 2022-01-27 | There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0. |
CVE-2021-46510 | Medium | 5.5 | 2022-01-27 | There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0. |
CVE-2021-46508 | Medium | 5.5 | 2022-01-27 | There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0. |
CVE-2021-46506 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0. |
CVE-2021-46504 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0. |
CVE-2021-44994 | Medium | 5.5 | 2022-01-25 | There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0. |
CVE-2021-44993 | Medium | 5.5 | 2022-01-25 | There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0. |
CVE-2022-22892 | Medium | 5.5 | 2022-01-21 | There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_i… |