# CWE-691.

Every Advisory and CVE whose sources give the weakness CWE-691, newest first.

## Records, newest first

- [Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm \`br_table\` instruction](https://agentprime.io/advisories/GHSA-mghf-wjfp-p5xm.md)
  `GHSA-mghf-wjfp-p5xm`, `CVE-2026-115893`, `RUSTSEC-2026-0379` · crates.io `wasmtime`: affected `<36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `36.0.19`, `48.0.7`, `49.0.4` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-691
- [Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76469.md)
  `CVE-2026-76469` · CVE record: Cisco Cisco Campus Gateway Software and 3 more · CVSS 7.4 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-691
- [Vyper: Return inside for loop more than 1 level deep](https://agentprime.io/advisories/GHSA-vg88-3v92-rjx2.md)
  `GHSA-vg88-3v92-rjx2`, `CVE-2020-37288` · PyPI `vyper`: affected `>=0.1.0b10, <0.2.3`, fixed in `0.2.3` · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-670, CWE-691
- [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20276.md)
  `CVE-2026-20276` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-691
- [An issue was discovered in openRISC OR1200 commit 83ac6b.](https://agentprime.io/advisories/CVE-2025-51675.md)
  `CVE-2025-51675` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-691
- [Google Chrome: Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65…](https://agentprime.io/advisories/CVE-2026-79033.md)
  `CVE-2026-79033` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-691
- [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20271.md)
  `CVE-2026-20271` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-691
- [net: skbuff: propagate shared-frag marker through frag-transfer helpers](https://agentprime.io/advisories/CVE-2026-43503.md)
  `CVE-2026-43503` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 May 2026 · Tags: CWE-664, CWE-691
- [Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability](https://agentprime.io/advisories/CVE-2026-5938.md)
  `CVE-2026-5938` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-691
- [Intel(R) PROSet/Wireless WiFi Software for Windows: Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for…](https://agentprime.io/advisories/CVE-2025-35963.md)
  `CVE-2025-35963` · CVE record: Intel(R) PROSet/Wireless WiFi Software for Windows · CVSS 8.3 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-691
- [Intel(R) 700 Series Ethernet: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R)…](https://agentprime.io/advisories/CVE-2025-25273.md)
  `CVE-2025-25273` · CVE record: Intel(R) 700 Series Ethernet · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-691
- [Intel(R) Xeon(R) processors: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware…](https://agentprime.io/advisories/CVE-2025-24305.md)
  `CVE-2025-24305` · CVE record: Intel(R) Xeon(R) processors · CVSS 7.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-691
- [Intel(R) 800 Series Ethernet: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R)…](https://agentprime.io/advisories/CVE-2025-22893.md)
  `CVE-2025-22893` · CVE record: Intel(R) 800 Series Ethernet · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-691
- [Zoom Clients for iOS - Insufficient Control Flow Management](https://agentprime.io/advisories/CVE-2025-49463.md)
  `CVE-2025-49463` · CVE record: Zoom Communications Inc. Zoom Clients for iOS · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-691
- [Vyper's \`slice()\` may elide side-effects when output length is 0](https://agentprime.io/advisories/GHSA-3vcg-j39x-cwfm.md)
  `GHSA-3vcg-j39x-cwfm`, `CVE-2025-47774`, `PYSEC-2026-2028` · PyPI `vyper`: affected `<=0.4.2rc1`, no fixed version yet · CVSS 2.9 Low · Not analysed yet · Published 16 May 2025 · Tags: CWE-691
- [Vyper's \`concat()\` builtin may elide side-effects for zero-length arguments](https://agentprime.io/advisories/GHSA-qhr6-mgqr-mchm.md)
  `GHSA-qhr6-mgqr-mchm`, `CVE-2025-47285`, `PYSEC-2026-2029` · PyPI `vyper`: affected `<=0.4.2rc1`, no fixed version yet · CVSS 2.9 Low · Not analysed yet · Published 16 May 2025 · Tags: CWE-691
- [Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Insufficient control flow management for some Edge Orchestrator software for Intel(R)…](https://agentprime.io/advisories/CVE-2025-20022.md)
  `CVE-2025-20022` · CVE record: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 5.8 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-691
- [Intel(R) Xeon(R) 6 processor E-Cores firmware: Insufficient control flow management in the Alias Checking Trusted Module for some…](https://agentprime.io/advisories/CVE-2025-20004.md)
  `CVE-2025-20004` · CVE record: Intel(R) Xeon(R) 6 processor E-Cores firmware · CVSS 8.5 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-691
- [An issue was discovered in Open5GS v2.7.2.](https://agentprime.io/advisories/CVE-2025-25774.md)
  `CVE-2025-25774` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-691
- [Intel(R) QAT Engine for OpenSSL software: Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software…](https://agentprime.io/advisories/CVE-2024-33617.md)
  `CVE-2024-33617` · CVE record: Intel(R) QAT Engine for OpenSSL software · CVSS 8.2 High · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-691
- [Intel(R) VROC software: Insufficient control flow management in some Intel(R) VROC software before version…](https://agentprime.io/advisories/CVE-2024-29079.md)
  `CVE-2024-29079` · CVE record: Intel(R) VROC software · CVSS 6.9 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-691
- [Intel(R) Xeon(R) Processors: Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R)…](https://agentprime.io/advisories/CVE-2024-25565.md)
  `CVE-2024-25565` · CVE record: Intel(R) Xeon(R) Processors · CVSS 4.8 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-691
- [Intel(R) TDX module software: Insufficient control flow management in some Intel(R) TDX module software before version…](https://agentprime.io/advisories/CVE-2024-21801.md)
  `CVE-2024-21801` · CVE record: Intel(R) TDX module software · CVSS 8.3 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-691
- [Intel(R) Xeon Processors: Insufficient control flow management for some Intel(R) Xeon Processors may allow an…](https://agentprime.io/advisories/CVE-2024-22374.md)
  `CVE-2024-22374` · CVE record: Intel(R) Xeon Processors · CVSS 6.8 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-691
- [evmos allows transferring unvested tokens after delegations](https://agentprime.io/advisories/GHSA-pxv8-qhrh-jc7v.md)
  `GHSA-pxv8-qhrh-jc7v`, `CVE-2024-32873`, `CVE-2024-37158`, `CVE-2024-37159`, `GO-2024-2891`, `GO-2024-2926`, `GO-2024-2927` · Go `github.com/evmos/evmos/v10` and 11 more: affected `<18.0.0`, fixed in `18.0.0` · CVSS 3.5 Low · Not analysed yet · Published 6 Jun 2024 · Tags: Broken access control, CWE-682, CWE-691
- [Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…: Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R)…](https://agentprime.io/advisories/CVE-2021-33157.md)
  `CVE-2021-33157` · CVE record: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware · CVSS 7.2 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-691
- [Google Chrome: Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed…](https://agentprime.io/advisories/CVE-2024-3847.md)
  `CVE-2024-3847` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-305, CWE-691
- [Intel(R) Optane(TM) SSD products: Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD…](https://agentprime.io/advisories/CVE-2023-24587.md)
  `CVE-2023-24587` · CVE record: Intel(R) Optane(TM) SSD products · CVSS 6.9 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-691
- [Intel Unison software: Insufficient control flow management for some Intel Unison software may allow an…](https://agentprime.io/advisories/CVE-2022-46299.md)
  `CVE-2022-46299` · CVE record: Intel Unison software · CVSS 3.3 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-691
- [Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.](https://agentprime.io/advisories/CVE-2023-5102.md)
  `CVE-2023-5102` · CVE record: SICK AG APU0200 · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: CWE-691
- [Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location](https://agentprime.io/advisories/CVE-2023-44384.md)
  `CVE-2023-44384` · CVE record: discourse discourse-jira · CVSS 4.1 Medium · Not analysed yet · Published 6 Oct 2023 · Tags: CWE-691
- [Hyperscan Library maintained by Intel(R): Insufficient control flow management in the Hyperscan Library maintained by Intel(R)…](https://agentprime.io/advisories/CVE-2023-28711.md)
  `CVE-2023-28711` · CVE record: Hyperscan Library maintained by Intel(R) · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-691
- [Intel(R) Processors: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors…](https://agentprime.io/advisories/CVE-2022-43505.md)
  `CVE-2022-43505` · CVE record: Intel(R) Processors · CVSS 4.1 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-691
- [Intel(R) IPP Cryptography software: Insufficient control flow management in the Intel(R) IPP Cryptography software before…](https://agentprime.io/advisories/CVE-2022-41646.md)
  `CVE-2022-41646` · CVE record: Intel(R) IPP Cryptography software · CVSS 4.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-691
- [Intel(R) IPP Cryptography software: Insufficient control flow management for the Intel(R) IPP Cryptography software before…](https://agentprime.io/advisories/CVE-2022-37409.md)
  `CVE-2022-37409` · CVE record: Intel(R) IPP Cryptography software · CVSS 4.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-691
- [In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible](https://agentprime.io/advisories/CVE-2022-48481.md)
  `CVE-2022-48481` · CVE record: JetBrains Toolbox App · CVSS 5.2 Medium · Not analysed yet · Published 28 Apr 2023 · Tags: CWE-691
- [Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.](https://agentprime.io/advisories/CVE-2023-20559.md)
  `CVE-2023-20559` · CVE record: AMD Ryzen™ 2000 Series and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-691
- [In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.](https://agentprime.io/advisories/CVE-2022-46828.md)
  `CVE-2022-46828` · CVE record: JetBrains IntelliJ IDEA · CVSS 5.2 Medium · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-691
- [Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20697.md)
  `CVE-2022-20697` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-691
- [Vulnerability in Snow Inventory Java Scanner](https://agentprime.io/advisories/CVE-2021-4106.md)
  `CVE-2021-4106` · CVE record: SNOW Snow Inventory Java Scanner · CVSS 7.8 High · Not analysed yet · Published 16 Feb 2022 · Tags: CWE-691
- [Intel(R) Processors: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors…](https://agentprime.io/advisories/CVE-2021-0157.md)
  `CVE-2021-0157` · CVE record: Intel(R) Processors · CVSS 6.7 Medium · Not analysed yet · Published 17 Nov 2021 · Tags: CWE-691
- [Intel(R) Processors: Insufficient control flow management in the firmware for some Intel(R) Processors may…](https://agentprime.io/advisories/CVE-2020-12359.md)
  `CVE-2020-12359` · CVE record: Intel(R) Processors · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2021 · Tags: CWE-691

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-691>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-691/>. Everything for agents: <https://agentprime.io/llms.txt>.