Advisories · Weakness
CWE-682.
Every Advisory and CVE whose sources give the weakness CWE-682, newest first.
- CVSS 2.7 Low
matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method
- CWE-682
>=0.0.0-0, <0.14.1 · fixed in 0.14.1
GHSA-qhj8-q5r6-8q6j · CVE-2025-59047 - CVSS 6.9 Medium
Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price
- polkadot-evm frontier
- CWE-682
- CWE-754
- CVSS 5.0 Medium
Libssh: incorrect return code handling in ssh_kdf() in libssh
- libssh
- Red Hat Enterprise Linux 8
- CWE-682
- CVSS 3.2 Low
Incorrect calculation in AMD Versal Adaptive SoC Devices and others
- AMD Versal Adaptive SoC Devices
- AMD Versal RF Series
- Information disclosure
- Denial of service
- CVSS 7.5 High
Tarfile extracts filtered members when errorlevel=0
- Python Software Foundation CPython
- CWE-682
- CVSS 2.3 Low
Vyper's sqrt doesn't define rounding behavior
- CWE-682
<0.4.1 · fixed in 0.4.1
GHSA-2p94-8669-xg86 · CVE-2025-26622 - CVSS 5.3 Medium
The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.
- CWE-682
- CVSS 6.9 Medium
Denial of Service through Data corruption in gRPC-C++
- gRPC-C++
- CWE-682
- CVSS 5.9 Medium
`fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc
- matter-labs era-compiler-solidity
- CWE-682
- CVSS 2.7 Low
Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables in github.com/hashicorp/nomad
- CWE-682
>=1.4.0, <1.4.6 || >=1.5.0, <1.5.1 · fixed in 1.4.6, 1.5.1
GHSA-hhvx-8755-4cvw · CVE-2023-1296 - CVSS 7.5 High
Incorrect Address Range Calculations
- Renesas rcar_gen3_v2.5
- CWE-682
- CVSS 3.5 Low
evmos allows transferring unvested tokens after delegations
- Broken access control
- CWE-682
<18.0.0 · fixed in 18.0.0
GHSA-pxv8-qhrh-jc7v · CVE-2024-32873 - CVSS 9.8 CriticalCritical · CVSS 9+
An issue in the oneflow.permute component of OneFlow-Inc.
- CWE-682
- CVSS 5.9 Medium
era-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization
- matter-labs era-compiler-solidity
- CWE-682
- CVSS 5.3 Medium
Incorrect calculation in Intel(R) Xeon(R) D Processors with Intel(R) SGX
- Intel(R) Xeon(R) D Processors with Intel(R) SGX
- CWE-682
- CVSS 4.9 Medium
Incorrect calculation in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- CWE-682
- CVSS 7.5 High
incorrect storage layout for contracts containing large arrays
- CWE-193
- CWE-682
<0.3.8 · fixed in 0.3.8
GHSA-6m97-7527-mh74 · CVE-2023-46247 - CVSS 6.5 Medium
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-682
- CVSS 8.8 High
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-682
- CVSS 5.3 Medium
Vyper's `_abi_decode` input not validated in complex expressions
- CWE-682
>=0.3.4, <0.3.10 · fixed in 0.3.10
GHSA-cx2q-hfxr-rj97 · CVE-2023-42460 - CVSS 10.0 CriticalCritical · CVSS 9+
Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
- Linux Kernel
- CWE-682
-
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold.
- CWE-682
- CVSS 8.6 High
Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service
- Rockwell Automation Armor PowerFlex
- CWE-682
- CVSS 7.5 High
Frontier's modexp precompile is slow for even modulus
- CWE-682
<=1.0.0 · no fixed version yet
GHSA-fcmm-54jp-7vf6 · CVE-2023-28431 - CVSS 6.5 Medium
OpenZeppelin Contracts contains Incorrect Calculation
- CWE-682
>=4.8.0, <4.8.2 · fixed in 4.8.2
GHSA-878m-3g6q-594q · CVE-2023-26488 - CVSS 7.5 High
nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars
- CWE-682
<0.0.2 · fixed in 0.0.2
GHSA-f6hc-9g49-xmx7 · CVE-2023-24533 - CVSS 5.3 Medium
BIG-IP software SYN cookies vulnerability CVE-2022-36795
- F5 BIG-IP
- CWE-682
- CVSS 5.3 Medium
Weight not properly refunded after EVM execution
- CWE-682
<=3.0.0 · no fixed version yet
GHSA-v57h-6hmh-g2p4 · CVE-2022-39242 - CVSS 7.5 High
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
- CWE-682
>=4.3.0, <4.7.2 · fixed in 4.7.2
GHSA-xrc4-737v-9q75 · CVE-2022-31198 - CVSS 5.3 Medium
Sweet-B Library: Point compress/decompress using the wrong bit for sign
- Western Digital Sweet B Library
- CWE-682
- CVSS 5.1 Medium
Miscompilation of constant values in division on AArch64
- Memory corruption
- CWE-682
>=0.0.0-0, <0.38.2 · fixed in 0.38.2
GHSA-7f6x-jwh5-m9r4 · CVE-2022-23636 - CVSS 4.8 Medium
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
- CWE-682
>=0.0.0-0, <0.38.1 · fixed in 0.38.1
GHSA-jqwc-c49r-4w2x · CVE-2022-31104 - CVSS 7.5 High
Uncontrolled Resource Consumption in fast-string-search
- Denial of service
- CWE-682
<=1.4.3 · no fixed version yet
GHSA-4263-q746-94mw · CVE-2022-22138 - CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect Calculation in moodle
- CWE-682
>=3.9, <3.9.14 || >=3.10, <3.10.11 || >=3.11, <3.11.7 || >=4.0, <4.0.1 · fixed in 3.9.14, 3.10.11, 3.11.7, 4.0.1
GHSA-w37f-pvvx-wcwm · CVE-2022-30600 - CVSS 9.1 CriticalCritical · CVSS 9+
Incorrect Calculation in solana_rbpf
- CWE-682
>=0.2.26, <0.2.28 · fixed in 0.2.28
GHSA-9qmm-4mfr-r3wj · CVE-2022-23066 - CVSS 5.9 Medium
Incorrect calculation in F5 BIG-IP
- F5 BIG-IP
- CWE-682
- CVSS 6.3 Medium
Incorrect Calculation in github.com/open-policy-agent/opa
- CWE-682
>=0.33.1, <0.37.2 · fixed in 0.37.2
GHSA-hcw3-j74m-qc58 · CVE-2022-23628 -
Incorrect calculation in BIG-IP AFM
- BIG-IP AFM
- CWE-682
-
Incorrect calculation in BIG-IP
- BIG-IP
- CWE-682
- CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect Calculation in the MSR JavaScript Cryptography Library
- CWE-682
<1.5.8 · fixed in 1.5.8
GHSA-9x9j-836w-8f55 · CVE-2020-1026 - CVSS 8.8 High
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memo…
- CWE-682
- CVSS 5.5 Medium
Segfault due to negative splits in `SplitV`
- CWE-682
<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1 · fixed in 2.4.4, 2.5.2, 2.6.1
GHSA-cpf4-wx82-gxp6 · CVE-2021-41222 - CVSS 4.3 Medium
missing clamps for decimal args in external functions
- CWE-682
<0.3.0 · fixed in 0.3.0
GHSA-c7pr-343r-5c46 · CVE-2021-41122 - CVSS 6.2 Medium
Incorrect calculation in Enbra EWM does not report backflows or no flow events
- Enbra AT-WMBUS-16-2
- Enbra ER-AM DN 15
- CWE-682
- CVSS 9.8 CriticalCritical · CVSS 9+
Calculation error in ark-r1cs-std
- CWE-682
>=0.2.0, <0.3.1 · fixed in 0.3.1
GHSA-qj3v-q2vj-4c8h · CVE-2021-38194 - CVSS 7.5 High
Flaw in streaming state in orion
- CWE-682
<0.11.2 · fixed in 0.11.2
GHSA-gffv-5hr2-f9gj · CVE-2018-20999 - CVSS 3.1 Low
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
- CWE-682
<=1.0.0 · no fixed version yet
GHSA-xh2p-7p87-fhgh - CVSS 5.3 Medium
Consensus flaw during block processing in github.com/ethereum/go-ethereum
- CWE-682
>=1.9.4, <1.9.20 · fixed in 1.9.20
GHSA-xw37-57qp-9mm4 · CVE-2020-26265 - CVSS 6.5 Medium
Shallow copy bug in geth
- CWE-682
>=1.9.7, <1.9.17 · fixed in 1.9.17
GHSA-69v6-xc2j-r2jf · CVE-2020-26241 - CVSS 5.3 Medium
Erroneous Proof of Work calculation in geth
- CWE-682
<1.9.24 · fixed in 1.9.24
GHSA-v592-xf75-856p · CVE-2020-26240 - CVSS 8.8 High
Incorrect calculation in Linux Kernel
- Linux Kernel
- CWE-682
-
Incorrect calculation in SCALANCE XM-400, XR-500
- SCALANCE XM-400, XR-500
- CWE-682
- CVSS 7.2 High
Loopback bypass in Coturn
- coturn
- CWE-441
- CWE-682
-
Incorrect Calculation in bigint-money
- CWE-682
<0.6.2 · fixed in 0.6.2
GHSA-9r3m-mhfm-39cm - CVSS 8.8 High
Incorrect calculation in Android
- Android
- CWE-682
- CVSS 9.8 CriticalCritical · CVSS 9+
Sensitive Data Exposure in msrcrypto
- CWE-682
<1.4.1 · fixed in 1.4.1
GHSA-qg3g-2mgh-33j8 · CVE-2018-8319