# CWE-252. Every Advisory and CVE whose sources give the weakness CWE-252, newest first. ## Records, newest first (an older page) - [Wazuh NULL pointer dereference in fim_alert line 666](https://agentprime.io/advisories/CVE-2025-64169.md) `CVE-2025-64169` · CVE record: wazuh wazuh · CVSS 5.1 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: Memory corruption, CWE-252 - [Wazuh vulnerable to NULL pointer dereference in DecodeCiscat](https://agentprime.io/advisories/CVE-2025-62791.md) `CVE-2025-62791` · CVE record: wazuh wazuh · CVSS 6.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Memory corruption, CWE-252 - [Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state](https://agentprime.io/advisories/CVE-2025-62790.md) `CVE-2025-62790` · CVE record: wazuh wazuh · CVSS 6.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Memory corruption, CWE-252 - [Wazuh vulnerable to NULL pointer dereference in fim_alert line 712](https://agentprime.io/advisories/CVE-2025-62789.md) `CVE-2025-62789` · CVE record: wazuh wazuh · CVSS 6.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Memory corruption, CWE-252 - [Wazuh fillData NULL pointer dereference causes analysisd crash](https://agentprime.io/advisories/CVE-2025-62785.md) `CVE-2025-62785` · CVE record: wazuh wazuh · CVSS 6.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Memory corruption, CWE-252 - [GNU Binutils prdbg.c tg_tag_type return value](https://agentprime.io/advisories/CVE-2025-11839.md) `CVE-2025-11839` · CVE record: GNU Binutils · CVSS 4.8 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-252, CWE-253 - [BIG-IP Advanced WAF and ASM vulnerability](https://agentprime.io/advisories/CVE-2025-61935.md) `CVE-2025-61935` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-252 - [Unchecked return value in Fortinet FortiOS](https://agentprime.io/advisories/CVE-2025-58903.md) `CVE-2025-58903` · CVE record: Fortinet FortiOS · CVSS 2.5 Low · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-252 - [Unchecked return value in Ivanti Connect Secure and others](https://agentprime.io/advisories/CVE-2025-55146.md) `CVE-2025-55146` · CVE record: Ivanti Connect Secure and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-252 - [ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure](https://agentprime.io/advisories/CVE-2025-54571.md) `CVE-2025-54571` · CVE record: owasp-modsecurity ModSecurity · CVSS 6.9 Medium · Not analysed yet · Published 5 Aug 2025 · Tags: CWE-252 - [Denial of Service (DoS) vulnerabilitiey in Zigbee library](https://agentprime.io/advisories/CVE-2025-1394.md) `CVE-2025-1394` · CVE record: silabs.com Zigbee Stack · CVSS 5.9 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: CWE-252 - [Unchecked return value in NASA CryptoLib](https://agentprime.io/advisories/CVE-2025-46672.md) `CVE-2025-46672` · CVE record: NASA CryptoLib · CVSS 3.5 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-252 - [Wago: Vulnerability in libwagosnmp](https://agentprime.io/advisories/CVE-2024-12650.md) `CVE-2024-12650` · CVE record: WAGO CC100 0751-9x01 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-252 - [Unchecked return value in libarchive](https://agentprime.io/advisories/CVE-2025-25724.md) `CVE-2025-25724` · CVE record: libarchive libarchive · CVSS 4.0 Medium · Not analysed yet · Published 2 Mar 2025 · Tags: CWE-252 - [Grub2: commands/extcmd: missing check for failed allocation](https://agentprime.io/advisories/CVE-2024-45775.md) `CVE-2024-45775` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-252 - [Unchecked sscanf return value which leads to memory data leak](https://agentprime.io/advisories/CVE-2025-0518.md) `CVE-2025-0518` · CVE record: FFmpeg FFmpeg · CVSS 4.8 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: Memory corruption, CWE-252 - [Zoom Apps - Improper Input Validation](https://agentprime.io/advisories/CVE-2024-45419.md) `CVE-2024-45419` · CVE record: Zoom Communications Inc. Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers · CVSS 8.1 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-252 - [Apache Traffic Server: Server process can fail to drop privilege](https://agentprime.io/advisories/CVE-2024-50306.md) `CVE-2024-50306` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-252 - [An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set\*id () function.](https://agentprime.io/advisories/CVE-2023-47480.md) `CVE-2023-47480` · CVE record · CVSS 8.4 High · Not analysed yet · Published 20 Sept 2024 · Tags: CWE-252 - [Unchecked return value in Yokogawa Electric Corporation Dual-redundant Platform for Computer (PC2CKM)](https://agentprime.io/advisories/CVE-2024-8110.md) `CVE-2024-8110` · CVE record: Yokogawa Electric Corporation Dual-redundant Platform for Computer (PC2CKM) · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2024 · Tags: CWE-252 - [A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used](https://agentprime.io/advisories/CVE-2024-42491.md) `CVE-2024-42491` · CVE record: asterisk asterisk · CVSS 5.7 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-252 - [Fault Injection of EdDSA signature in WolfCrypt](https://agentprime.io/advisories/CVE-2024-2881.md) `CVE-2024-2881` · CVE record: WolfSSL wolfCrypt · CVSS 6.7 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-252, CWE-1256 - [Fault Injection of RSA encryption in WolfCrypt](https://agentprime.io/advisories/CVE-2024-1545.md) `CVE-2024-1545` · CVE record: WolfSSL wolfCrypt · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-252, CWE-1256 - [Unchecked return value in Intel(R) CSME](https://agentprime.io/advisories/CVE-2023-40067.md) `CVE-2023-40067` · CVE record: Intel(R) CSME · CVSS 5.7 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-252 - [Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR](https://agentprime.io/advisories/CVE-2024-39558.md) `CVE-2024-39558` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-252 - [mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown](https://agentprime.io/advisories/CVE-2024-39492.md) `CVE-2024-39492` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-252 - [In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.](https://agentprime.io/advisories/CVE-2024-38427.md) `CVE-2024-38427` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-252 - [Unchecked return value in Schneider Electric Sage 1410 and others](https://agentprime.io/advisories/CVE-2024-37039.md) `CVE-2024-37039` · CVE record: Schneider Electric Sage 1410 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-252 - [Cupsd Listen arbitrary chmod 0140777](https://agentprime.io/advisories/CVE-2024-35235.md) `CVE-2024-35235` · CVE record: OpenPrinting cups · CVSS 4.4 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Path traversal, CWE-252 - [Unchecked return value in Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs](https://agentprime.io/advisories/CVE-2023-41092.md) `CVE-2023-41092` · CVE record: Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs · CVSS 7.6 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-252 - [An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.](https://agentprime.io/advisories/CVE-2022-46897.md) `CVE-2022-46897` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2024 · Tags: CWE-252 - [Unchecked return value in Intel(R) Thunderbolt(TM) DCH drivers for Windows](https://agentprime.io/advisories/CVE-2023-26591.md) `CVE-2023-26591` · CVE record: Intel(R) Thunderbolt(TM) DCH drivers for Windows · CVSS 2.0 Low · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-252 - [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2023-50359.md) `CVE-2023-50359` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 3.4 Low · Not analysed yet · Published 2 Feb 2024 · Tags: CWE-252 - [Unchecked return value in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-0743.md) `CVE-2024-0743` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-252 - [Libssh: missing checks for return values for digests](https://agentprime.io/advisories/CVE-2023-6918.md) `CVE-2023-6918` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.7 Low · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-252 - [Unchecked return value in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others](https://agentprime.io/advisories/CVE-2023-44322.md) `CVE-2023-44322` · CVE record: Siemens RUGGEDCOM RM1224 LTE(4G) EU and 4 more · CVSS 3.7 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-252 - [Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations](https://agentprime.io/advisories/CVE-2023-44182.md) `CVE-2023-44182` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.3 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-252 - [Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0](https://agentprime.io/advisories/CVE-2023-4162.md) `CVE-2023-4162` · CVE record: Brocade Fabric OS · CVSS 4.4 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-252 - [Unchecked return value in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA](https://agentprime.io/advisories/CVE-2023-29243.md) `CVE-2023-29243` · CVE record: Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA · CVSS 4.4 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-252 - [ecrecover can return undefined data if signature does not verify](https://agentprime.io/advisories/GHSA-f5x6-7qgp-jhf3.md) `GHSA-f5x6-7qgp-jhf3`, `CVE-2023-37902`, `PYSEC-2023-133` · PyPI `vyper`: affected `<0.3.10`, fixed in `0.3.10` · CVSS 5.3 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: CWE-252 - [Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP](https://agentprime.io/advisories/CVE-2023-3247.md) `CVE-2023-3247` · CVE record: PHP Group PHP · CVSS 2.6 Low · Not analysed yet · Published 22 Jul 2023 · Tags: Weak cryptography or TLS, CWE-252 - [Site Kit by Google plugin for WordPress](https://agentprime.io/advisories/CVE-2020-8934.md) `CVE-2020-8934` · CVE record: Google Site Kit By Google · CVSS 4.3 Medium · Not analysed yet · Published 7 Jul 2023 · Tags: CWE-252 - [Unchecked return value in Mozilla Firefox](https://agentprime.io/advisories/CVE-2023-25733.md) `CVE-2023-25733` · CVE record: Mozilla Firefox · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: CWE-252 - [Unchecked Return Value in gpac/gpac](https://agentprime.io/advisories/CVE-2023-3013.md) `CVE-2023-3013` · CVE record: gpac gpac/gpac · CVSS 4.4 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-252 - [RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark](https://agentprime.io/advisories/CVE-2023-24825.md) `CVE-2023-24825` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption, CWE-252 - [In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap\_\_new return value.](https://agentprime.io/advisories/CVE-2023-23003.md) `CVE-2023-23003` · CVE record · CVSS 4.0 Medium · Not analysed yet · Published 1 Mar 2023 · Tags: CWE-252 - [DoS in APROLs Tbase server](https://agentprime.io/advisories/CVE-2022-43765.md) `CVE-2022-43765` · CVE record: B&R Industrial Automation B&R APROL · CVSS 7.5 High · Not analysed yet · Published 8 Feb 2023 · Tags: CWE-252 - [Lack of checking preconditions in APROL](https://agentprime.io/advisories/CVE-2022-43763.md) `CVE-2022-43763` · CVE record: B&R Industrial Automation B&R APROL · CVSS 7.5 High · Not analysed yet · Published 8 Feb 2023 · Tags: CWE-252 - [Unchecked return value in Kernel](https://agentprime.io/advisories/CVE-2022-3108.md) `CVE-2022-3108` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 14 Dec 2022 · Tags: CWE-252 - [Unchecked return value from xmlTextReaderExpand](https://agentprime.io/advisories/GHSA-qv4q-mr5r-qprj.md) `GHSA-qv4q-mr5r-qprj`, `CVE-2022-23476` · RubyGems `nokogiri`: affected `>=1.13.8, <1.13.10`, fixed in `1.13.10` · CVSS 7.5 High · Not analysed yet · Published 8 Dec 2022 · Tags: Memory corruption, CWE-252 - [Unchecked return value in Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity…](https://agentprime.io/advisories/CVE-2022-25718.md) `CVE-2022-25718` · CVE record: Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-252 - [HashiCorp Consul vulnerable to authorization bypass](https://agentprime.io/advisories/GHSA-m69r-9g56-7mv8.md) `GHSA-m69r-9g56-7mv8`, `BIT-consul-2022-40716`, `CVE-2022-40716`, `GO-2022-1029` · Go `github.com/hashicorp/consul`: affected `<1.11.9 || >=1.12.0, <1.12.5 || >=1.13.0, <1.13.2`, fixed in `1.11.9`, `1.12.5`, `1.13.2` · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2022 · Tags: CWE-252 - [An issue has been found in PBC through 2022-8-27.](https://agentprime.io/advisories/CVE-2022-38936.md) `CVE-2022-38936` · CVE record · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-252 - [Unchecked return value in Dell CPG BIOS](https://agentprime.io/advisories/CVE-2022-31225.md) `CVE-2022-31225` · CVE record: Dell CPG BIOS · CVSS 3.0 Low · Not analysed yet · Published 12 Sept 2022 · Tags: CWE-252 - [Unchecked return value in undertow](https://agentprime.io/advisories/CVE-2022-1319.md) `CVE-2022-1319` · CVE record: undertow · No CVSS score · Not analysed yet · Published 31 Aug 2022 · Tags: CWE-252 - [Unchecked return value in libnbd](https://agentprime.io/advisories/CVE-2022-0485.md) `CVE-2022-0485` · CVE record: libnbd · No CVSS score · Not analysed yet · Published 29 Aug 2022 · Tags: CWE-252 - [Unchecked return value in python](https://agentprime.io/advisories/CVE-2021-4189.md) `CVE-2021-4189` · CVE record: python · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2022 · Tags: CWE-252 - [Unchecked return value in Kernel](https://agentprime.io/advisories/CVE-2021-3659.md) `CVE-2021-3659` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 22 Aug 2022 · Tags: CWE-252 - [OpenZeppelin Contracts's ERC165Checker may revert instead of returning false](https://agentprime.io/advisories/GHSA-qh9x-gcfh-pcrw.md) `GHSA-qh9x-gcfh-pcrw`, `CVE-2022-31170` · npm `@openzeppelin/contracts` and 1 more: affected `>=4.0.0, <4.7.1`, fixed in `4.7.1` · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2022 · Tags: CWE-20, CWE-252 - [Invalid file request can crash server](https://agentprime.io/advisories/GHSA-xw6g-jjvf-wwf9.md) `GHSA-xw6g-jjvf-wwf9`, `BIT-parse-2022-31089`, `CVE-2022-31089` · npm `parse-server`: affected `<4.10.12 || >=5.0.0, <5.2.3`, fixed in `4.10.12`, `5.2.3` · CVSS 7.5 High · Not analysed yet · Published 20 Jun 2022 · Tags: CWE-252, CWE-706 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .