Advisories · Weakness
CWE-252.
Every Advisory and CVE whose sources give the weakness CWE-252, newest first.
- CVSS 5.1 Medium
Wazuh NULL pointer dereference in fim_alert line 666
- wazuh
- Memory corruption
- CWE-252
- CVSS 6.9 Medium
Wazuh vulnerable to NULL pointer dereference in DecodeCiscat
- wazuh
- Memory corruption
- CWE-252
- CVSS 6.9 Medium
Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state
- wazuh
- Memory corruption
- CWE-252
- CVSS 6.9 Medium
Wazuh vulnerable to NULL pointer dereference in fim_alert line 712
- wazuh
- Memory corruption
- CWE-252
- CVSS 6.9 Medium
Wazuh fillData NULL pointer dereference causes analysisd crash
- wazuh
- Memory corruption
- CWE-252
- CVSS 4.8 Medium
GNU Binutils prdbg.c tg_tag_type return value
- GNU Binutils
- CWE-252
- CWE-253
- CVSS 8.7 High
BIG-IP Advanced WAF and ASM vulnerability
- F5 BIG-IP
- CWE-252
- CVSS 2.5 Low
Unchecked return value in Fortinet FortiOS
- Fortinet FortiOS
- CWE-252
- CVSS 4.9 Medium
Unchecked return value in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-252
- CVSS 6.9 Medium
ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure
- ModSecurity
- CWE-252
- CVSS 5.9 Medium
Denial of Service (DoS) vulnerabilitiey in Zigbee library
- silabs.com Zigbee Stack
- CWE-252
- CVSS 3.5 Low
Unchecked return value in NASA CryptoLib
- NASA CryptoLib
- CWE-252
- CVSS 5.4 Medium
Wago: Vulnerability in libwagosnmp
- WAGO CC100 0751-9x01
- WAGO Edge Controller 0752-8303/8000-0002
- CWE-252
- CVSS 4.0 Medium
Unchecked return value in libarchive
- libarchive
- CWE-252
- CVSS 5.2 Medium
Grub2: commands/extcmd: missing check for failed allocation
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 10
- CWE-252
- CVSS 4.8 Medium
Unchecked sscanf return value which leads to memory data leak
- FFmpeg
- Memory corruption
- CWE-252
- CVSS 8.1 High
Zoom Apps - Improper Input Validation
- Zoom Communications Inc. Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers
- CWE-252
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Traffic Server: Server process can fail to drop privilege
- Apache Software Foundation Apache Traffic Server
- CWE-252
- CVSS 8.4 High
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function.
- CWE-252
- CVSS 7.5 High
Unchecked return value in Yokogawa Electric Corporation Dual-redundant Platform for Computer (PC2CKM)
- Yokogawa Electric Corporation Dual-redundant Platform for Computer (PC2CKM)
- CWE-252
- CVSS 5.7 Medium
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
- asterisk
- Memory corruption
- CWE-252
- CVSS 6.7 Medium
Fault Injection of EdDSA signature in WolfCrypt
- WolfSSL wolfCrypt
- CWE-252
- CWE-1256
- CVSS 5.9 Medium
Fault Injection of RSA encryption in WolfCrypt
- WolfSSL wolfCrypt
- CWE-252
- CWE-1256
- CVSS 5.7 Medium
Unchecked return value in Intel(R) CSME
- Intel(R) CSME
- CWE-252
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252
- CVSS 7.0 High
mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown
- Linux kernel
- CWE-252
- CVSS 8.8 High
In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.
- CWE-252
- CVSS 5.9 Medium
Unchecked return value in Schneider Electric Sage 1410 and others
- Schneider Electric Sage 1410
- Schneider Electric Sage 1430
- CWE-252
- CVSS 4.4 Medium
Cupsd Listen arbitrary chmod 0140777
- OpenPrinting cups
- Path traversal
- CWE-252
- CVSS 7.6 High
Unchecked return value in Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs
- Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs
- CWE-252
- CVSS 5.3 Medium
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
- CWE-252
- CVSS 2.0 Low
Unchecked return value in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CWE-252
- CVSS 3.4 Low
QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-252
- CVSS 7.5 High
Unchecked return value in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-252
- CVSS 3.7 Low
Libssh: missing checks for return values for digests
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-252
- CVSS 3.7 Low
Unchecked return value in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-252
- CVSS 7.3 High
Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252
- CVSS 4.4 Medium
Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0
- Brocade Fabric OS
- CWE-252
- CVSS 4.4 Medium
Unchecked return value in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA
- Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA
- CWE-252
- CVSS 5.3 Medium
ecrecover can return undefined data if signature does not verify
- CWE-252
<0.3.10 · fixed in 0.3.10
GHSA-f5x6-7qgp-jhf3 · CVE-2023-37902 - CVSS 2.6 Low
Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
- PHP
- Weak cryptography or TLS
- CWE-252
- CVSS 4.3 Medium
Site Kit by Google plugin for WordPress
- Site Kit By Google
- CWE-252
- CVSS 7.5 High
Unchecked return value in Mozilla Firefox
- Mozilla Firefox
- CWE-252
- CVSS 4.4 Medium
Unchecked Return Value in gpac/gpac
- gpac/gpac
- CWE-252
- CVSS 7.5 High
RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark
- RIOT
- Memory corruption
- CWE-252
- CVSS 4.0 Medium
In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value.
- CWE-252
- CVSS 7.5 High
DoS in APROLs Tbase server
- B&R Industrial Automation B&R APROL
- CWE-252
- CVSS 7.5 High
Lack of checking preconditions in APROL
- B&R Industrial Automation B&R APROL
- CWE-252
- CVSS 5.5 Medium
Unchecked return value in Kernel
- Kernel
- CWE-252
- CVSS 7.5 High
Unchecked return value from xmlTextReaderExpand
- Memory corruption
- CWE-252
>=1.13.8, <1.13.10 · fixed in 1.13.10
GHSA-qv4q-mr5r-qprj · CVE-2022-23476 - CVSS 9.1 CriticalCritical · CVSS 9+
Unchecked return value in Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity…
- Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CWE-252
- CVSS 6.5 Medium
HashiCorp Consul vulnerable to authorization bypass
- CWE-252
<1.11.9 || >=1.12.0, <1.12.5 || >=1.13.0, <1.13.2 · fixed in 1.11.9, 1.12.5, 1.13.2
GHSA-m69r-9g56-7mv8 · CVE-2022-40716 - CVSS 7.5 High
An issue has been found in PBC through 2022-8-27.
- CWE-252
- CVSS 3.0 Low
Unchecked return value in Dell CPG BIOS
- Dell CPG BIOS
- CWE-252
-
Unchecked return value in undertow
- undertow
- CWE-252
-
Unchecked return value in libnbd
- libnbd
- CWE-252
- CVSS 5.3 Medium
Unchecked return value in python
- python
- CWE-252
-
Unchecked return value in Kernel
- Kernel
- CWE-252
- CVSS 7.5 High
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
- CWE-20
- CWE-252
>=4.0.0, <4.7.1 · fixed in 4.7.1
GHSA-qh9x-gcfh-pcrw · CVE-2022-31170 - CVSS 7.5 High
Invalid file request can crash server
- CWE-252
- CWE-706
<4.10.12 || >=5.0.0, <5.2.3 · fixed in 4.10.12, 5.2.3
GHSA-xw6g-jjvf-wwf9 · CVE-2022-31089