CWE-248.

dd-trace-cpp malformed unicode header values may cause crash

• DataDog dd-trace-cpp
• CWE-20
• CWE-248

Panic when parsing invalid palette-color images in golang.org/x/image

• CWE-248

<0.18.0 · fixed in 0.18.0

Unauthenticated DoS

• Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera
• CWE-248
• CWE-703

@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling

• CWE-248

<4.22.0 · fixed in 4.22.0

Envoy can crash due to uncaught nlohmann JSON exception

• envoy
• CWE-248

IBM App Connect Enterprise denial of service

• IBM App Connect Enterprise
• CWE-248

Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…: Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…

• Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware
• CWE-248

Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-248

Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability

• silabs.com Z/IP Gateway SDK
• CWE-248

Z/IP Gateway Device Reset Locally Denial of Service Vulnerability

• silabs.com Z/IP Gateway SDK
• CWE-248
• CWE-419

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.

• Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000
• CWE-248

In flashc, there is a possible information disclosure due to an uncaught exception.

• MediaTek, Inc. MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798
• CWE-248

In flashc, there is a possible information disclosure due to an uncaught exception.

• MediaTek, Inc. MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798
• CWE-248

Elasticsearch Uncaught Exception leading to crash

• CWE-248

>=8.4.0, <8.11.1 · fixed in 8.11.1

Cisco IOS: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow…

• Cisco IOS
• CWE-248

Gnutls: potential crash during chain building/verification

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-248

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

• openvswitch
• Red Hat Fast Datapath for RHEL 7
• CWE-248

Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability

• silabs.com PC Controller
• CWE-248

Silicon Labs PC Controller Denial of Service Vulnerability

• silabs.com PC Controller
• CWE-248
• CWE-419

Uncaught Exception in Macro Expecting Native Function to Exist

• CWE-248

<1.2.0 · fixed in 1.2.0

Uncaught Exception Handling Parsing Errors on Line Terminators

• CWE-248

<1.2.1 · fixed in 1.2.1

Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

• NetApp StorageGRID
• CWE-248

Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…

• Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
• CWE-248

Envoy crashes when using an address type that isn’t supported by the OS

• envoy
• CWE-248
• CWE-755

Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

• NetApp StorageGRID (formerly StorageGRID Webscale)
• CWE-248

Some WASM source files could have caused a crash when loaded in devtools.

• Mozilla Firefox
• CWE-248

Uncaught Exception processing HTTP Headers in SurrealDB

• CWE-248

<1.1.0 · fixed in 1.1.0

Uncaught Exception in surrealdb

• CWE-248

<1.1.1 · fixed in 1.1.1

Z-Wave Denial of Service caused by Stream of Packets

• silabs.com Gecko SDK
• CWE-248

Intel Unison software: Uncaught exception for some Intel Unison software may allow an authenticated user to…

• Intel Unison software
• CWE-248

Intel Unison software: Uncaught exception for some Intel Unison software may allow an authenticated user to…

• Intel Unison software
• CWE-248

Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software…

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-248

quic-go vulnerable to pointer dereference that can lead to panic

• Memory corruption
• CWE-248

>=0.37.0, <0.37.3 · fixed in 0.37.3

stellar-strkey vulnerable to panic in SignedPayload::from_payload

• CWE-248

<0.0.8 · fixed in 0.0.8

NVIDIA Cumulus Linux: NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an…

• NVIDIA Cumulus Linux
• CWE-248

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.5 || >=0.3.0, <0.3.3 · fixed in 0.2.5, 0.3.3

blurhash: panic on parsing crafted blurhash inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.0 · fixed in 0.2.0

Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

• CWE-248

>=1.53.0, <1.53.2 || >=1.54.0, <1.54.3 || >=1.55.0, <1.55.3 · fixed in 1.53.2, 1.54.3, 1.55.3

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception.

• Motorola EBTS/MBTS Base Radio
• CWE-248

Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds

• eProsima Fast-DDS
• CWE-248

Malformed serialized data in a data submessage leads to unhandled exception

• eProsima Fast-DDS
• CWE-248

Vault Enterprise Namespace Creation May Lead to Denial of Service

• HashiCorp Vault Enterprise
• CWE-248

DoS vulnerability for apps with sockets enabled

• CWE-248

<1.5.7 · fixed in 1.5.7

Vulnerability of failures to capture exceptions in the communication framework.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-248

Denial of service condition in M-Files Server

• M-Files Server
• CWE-248

engine.io Uncaught Exception vulnerability

• CWE-248

>=5.1.0, <6.4.2 · fixed in 6.4.2

Uncaught Exception in yaml

• CWE-248

>=2.0.0-5, <2.2.2 · fixed in 2.2.2

XWiki Platform vulnerable to page render failure due to broken translations

• CWE-248
• CWE-755

>=4.3-milestone-2, <13.10.11 || >=14.0-rc-1, <14.4.8 || >=14.5, <14.10.1 · fixed in 13.10.11, 14.4.8, 14.10.1

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop.

• Android
• CWE-248

In thermal, there is a possible memory corruption due to an uncaught exception.

• MediaTek, Inc. MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8175, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797
• CWE-248

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-248

Uncaught Exception in thorsten/phpmyfaq

• CWE-248

<3.1.11 · fixed in 3.1.11

Specially crafted RTPS message may cause an OpenDDS application to crash

• OpenDDS
• CWE-248

Triggered crash on direct RRDP access

• NLnet Labs Krill
• CWE-248

mercurius has Uncaught Exception when using subscriptions

• CWE-248

<8.13.2 || >=9.0.0, <11.5.0 · fixed in 8.13.2, 11.5.0

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes.

• CWE-248

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create erro...

• CWE-248

<6.5.1 · fixed in 6.5.1

Uncaught exception in engine.io

• CWE-248

<3.6.1 || >=4.0.0, <6.2.1 · fixed in 3.6.1, 6.2.1

fastify/websocket vulnerable to uncaught exception via crash on malformed packet

• CWE-248

>=5.0.0, <5.0.1 || >=6.0.0, <7.1.1 · fixed in 5.0.1, 7.1.1

Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability

• Cisco IOS
• CWE-248