CWE-617: Reachable Assertion, page 13

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

What the weakness is: CWE-617 at MITRE

1. 7.5CVE-2022-35984EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of type `int64` results in a mismatched type `CHECK` fail that can be used to trigger a denial o…

2. 7.5CVE-2022-35983EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the i…

3. 7.5CVE-2022-35981EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with returning errors. If it gets incorrectly sized inputs, the `CHECK` failure can be used to trigge…

4. 7.5CVE-2022-35971EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it results in a `CHECK` fail that can be used to trigger a denial of service attack. We have patche…

5. 7.5CVE-2022-35969EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. Otherwise, it gives a `CHECK` failure which can be used to trigger a denial of service atta…

6. 7.5CVE-2022-35968EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`. This results in a `CHECK` failure which can be used to trigger a denial of service attack…

7. 7.5CVE-2022-35963EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_shape`. This results in an overflow that results in a `CHECK` failure which can …

8. 7.5CVE-2022-35960EPSS 0.7%2022-09-16

   TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_o…

9. 7.5CVE-2022-35959EPSS 0.5%2022-09-16

   TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This results in an overflow that results in a `CHECK` failure which can be used to tr…

10. 7.5CVE-2022-35952EPSS 0.7%2022-09-16

    TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id` can trigger a `CHECK` failure and crash the program. It also requires its argu…

11. 7.5CVE-2022-35941EPSS 0.7%2022-09-16

    TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not checked. A negative `ksize` can trigger a `CHECK` failure and crash the program. We have patche…

12. 7.5CVE-2022-35935EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by assuming `input(0)`, `input(1)`, and `input(2)` to be scal…

13. 7.5CVE-2022-35934EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by overflowing the number of elements in a tens…

14. 5.5CVE-2022-38496EPSS 0.3%2022-09-13

    LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

15. 6.5CVE-2022-2520EPSS 1.3%2022-08-31

    A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

16. 6.5CVE-2022-36522EPSS 1.4%2022-08-26

    Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.

17. 5.5CVE-2022-2719EPSS 0.3%2022-08-10

    In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMa…

18. 7.5CVE-2022-34967EPSS 0.9%2022-08-03

    The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.

19. 6.5CVE-2021-46784EPSS 5.1%2022-07-17

    In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

20. 7.5CVE-2022-32082EPSS 2.1%2022-07-01

    MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.

21. 7.5CVE-2021-3431EPSS 0.9%2022-06-28

    Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9

22. 7.5CVE-2021-3430EPSS 0.9%2022-06-28

    Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr

23. 6.5CVE-2022-31100EPSS 0.9%2022-06-27

    rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a st…

24. 5.5CVE-2022-33069EPSS 0.6%2022-06-23

    Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment() at SMTEncoder.cpp.

25. 7.5CVE-2022-33024EPSS 1.1%2022-06-23

    There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.

26. 6.5CVE-2022-31009EPSS 0.7%2022-06-23

    wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid acce…

27. 6.5CVE-2022-34000EPSS 0.9%2022-06-19

    libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.cc.

28. 6.5CVE-2021-35101EPSS 0.1%2022-06-14

    Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile

29. 7.5CVE-2021-35073EPSS 0.6%2022-06-14

    Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

30. 7.5CVE-2021-30340EPSS 0.6%2022-06-14

    Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

31. 6.5CVE-2022-32978EPSS 0.9%2022-06-10

    There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

32. 7.5CVE-2022-29228EPSS 1.3%2022-06-09

    Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts …

33. 5.5CVE-2022-31651EPSS 1.1%2022-05-25

    In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.

34. 6.5CVE-2022-31620EPSS 1.4%2022-05-25

    In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded seque…

35. 5.5CVE-2022-29213EPSS 0.3%2022-05-21

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `tf.compat.v1.signal.rfft3d` lack input validation and under certain condition can result in…

36. 7.5CVE-2022-1183EPSS 6.2%2022-05-19

    On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS i…

37. 7.5CVE-2021-27500EPSS 1.3%2022-05-12

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

38. 7.5CVE-2021-27498EPSS 1.3%2022-05-12

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

39. 6.5CVE-2022-29977EPSS 1.0%2022-05-11

    There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.

40. 7.5CVE-2022-29339EPSS 1.2%2022-05-05

    In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.

41. 6.5CVE-2022-24272EPSS 1.0%2022-04-21

    An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB S…

42. 6.8CVE-2022-20694EPSS 1.2%2022-04-15

    A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting …

43. 7.5CVE-2022-27448EPSS 2.2%2022-04-14

    There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.

44. 7.5CVE-2022-27382EPSS 1.5%2022-04-12

    MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.

45. 7.5CVE-2021-30332EPSS 0.6%2022-04-01

    Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

46. 7.5CVE-2021-30329EPSS 0.6%2022-04-01

    Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

47. 7.5CVE-2021-30328EPSS 0.6%2022-04-01

    Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

48. 5.5CVE-2022-27939EPSS 1.0%2022-03-26

    tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.

49. 5.5CVE-2022-27938EPSS 0.6%2022-03-26

    stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.

50. 7.5CVE-2022-24777EPSS 1.2%2022-03-25

    grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This is due to incorrect l…