CWE-670: Always-Incorrect Control Flow Implementation, page 4
Filter
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
What the weakness is: CWE-670 at MITRE. All weaknesses
Ask an AI about CWE-670
Show the prompt
Explain CWE-670: Always-Incorrect Control Flow Implementation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/670.html and https://cve.bz/cve/cwe/670?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.3CVE-2020-5753EPSS 1.1%
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
- 4.3CVE-2020-3885EPSS 1.6%
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly …
- 7.5CVE-2020-9425ExploitEPSS 18%
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is a…
- 7.5CVE-2019-19324EPSS 1.0%
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.
- 7.5CVE-2019-20430EPSS 2.2%
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.
- 7.5CVE-2014-2686EPSS 1.2%
Ansible prior to 1.5.4 mishandles the evaluation of some strings.
- 7.5CVE-2019-19729EPSS 1.1%
An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will re…
- 9.8CVE-2019-17192EPSS 2.7%
The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which might make it easier for remote attackers to cause a denial…
- 7.5CVE-2019-11412EPSS 2.1%
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.
- 7.5CVE-2019-9946EPSS 3.2%
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of …
- 6.5CVE-2018-19212EPSS 0.9%
In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.
- 6.5CVE-2018-19058EPSS 1.9%
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
- 8.8CVE-2018-16766EPSS 1.3%
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.
- 7.8CVE-2017-0604EPSS 0.6%
An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a …