# CWE-413.

Every Advisory and CVE whose sources give the weakness CWE-413, newest first.

## Records, newest first

- [Out of bound access in PPC due to race condition in global variable access](https://agentprime.io/advisories/CVE-2026-48178.md)
  `CVE-2026-48178` · CVE record: Samsung Semiconductor Exynos 2200 and 3 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-413
- [OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.](https://agentprime.io/advisories/CVE-2026-111498.md)
  `CVE-2026-111498` · CVE record: Dell OpenManage Enterprise · CVSS 4.7 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-413
- [Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover](https://agentprime.io/advisories/CVE-2026-102080.md)
  `CVE-2026-102080` · CVE record: Juniper Networks Junos OS · CVSS 6.0 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-413
- [Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash](https://agentprime.io/advisories/CVE-2026-102083.md)
  `CVE-2026-102083` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-413
- [Deadlock in OpenVPN ovpn-dco-win](https://agentprime.io/advisories/CVE-2026-105390.md)
  `CVE-2026-105390` · CVE record: OpenVPN ovpn-dco-win · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, CWE-413
- [Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed](https://agentprime.io/advisories/CVE-2026-92615.md)
  `CVE-2026-92615` · CVE record: Red Hat RHEM 1.2 for RHEL 10 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-413
- [Use after free and crash under special conditions in RPZ code](https://agentprime.io/advisories/CVE-2026-44608.md)
  `CVE-2026-44608` · CVE record: NLnet Labs Unbound · CVSS 4.6 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-413
- [Squid has Denial of Service in ICP Response handling](https://agentprime.io/advisories/CVE-2026-32748.md)
  `CVE-2026-32748` · CVE record: squid-cache squid · CVSS 8.7 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-413, CWE-826
- [Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted](https://agentprime.io/advisories/GHSA-jw2v-cq5x-q68g.md)
  `GHSA-jw2v-cq5x-q68g`, `CVE-2025-69198`, `PKSA-hm8z-9vp5-kfyz` · Packagist `pterodactyl/panel`: affected `<1.12.0`, fixed in `1.12.0` · CVSS 6.0 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: Race condition, Denial of service, CWE-413, CWE-667
- [Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability](https://agentprime.io/advisories/CVE-2025-0003.md)
  `CVE-2025-0003` · CVE record: AMD Xilinx Run Time (XRT) · CVSS 7.3 High · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-413
- [Automation Runtime SDM requests may impact system](https://agentprime.io/advisories/CVE-2025-3450.md)
  `CVE-2025-3450` · CVE record: B&R Industrial Automation Automation Runtime · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2025 · Tags: CWE-413
- [Kernel: deadlock in ksmbd_find_crypto_ctx()](https://agentprime.io/advisories/CVE-2023-32253.md)
  `CVE-2023-32253` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: CWE-413
- [X.org X server: In X.Org X server 20.11 through 21.1.16…](https://agentprime.io/advisories/CVE-2022-49737.md)
  `CVE-2022-49737` · CVE record: X.org X server · CVSS 7.7 High · Not analysed yet · Published 16 Mar 2025 · Tags: CWE-413
- [Kernel: vmwgfx: race condition leading to information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-33951.md)
  `CVE-2023-33951` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-413
- [kernel: A vulnerability was found due to missing lock for IOPOLL flaw in…](https://agentprime.io/advisories/CVE-2023-2430.md)
  `CVE-2023-2430` · CVE record: kernel · CVSS 5.5 Medium · Not analysed yet · Published 23 Jul 2023 · Tags: CWE-413
- [Snap One OvrC Cloud: The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage…](https://agentprime.io/advisories/CVE-2023-28649.md)
  `CVE-2023-28649` · CVE record: Snap One OvrC Cloud · CVSS 8.6 High · Not analysed yet · Published 22 May 2023 · Tags: CWE-413
- [Kernel: A denial of service problem was found, due to a possible recursive locking scenario…](https://agentprime.io/advisories/CVE-2023-2269.md)
  `CVE-2023-2269` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 25 Apr 2023 · Tags: CWE-413
- [Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of seria…](https://agentprime.io/advisories/CVE-2022-24946.md)
  `CVE-2022-24946` · CVE record: Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022 · Tags: CWE-413
- [Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20678.md)
  `CVE-2022-20678` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-413
- [Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)](https://agentprime.io/advisories/CVE-2019-17102.md)
  `CVE-2019-17102` · CVE record: Bitdefender Bitdefender BOX 2 · CVSS 8.3 High · Not analysed yet · Published 27 Jan 2020 · Tags: CWE-413
- [An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.…](https://agentprime.io/advisories/CVE-2019-8998.md)
  `CVE-2019-8998` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2019 · Tags: CWE-413

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-413>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-413/>. Everything for agents: <https://agentprime.io/llms.txt>.