Advisories · Weakness

CWE-691.

Every Advisory and CVE whose sources give the weakness CWE-691, newest first.

wasmtime crates.io

CVSS 9.9 CriticalCritical · CVSS 9+

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
- CWE-691
<36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 36.0.19, 48.0.7, 49.0.4

GHSA-mghf-wjfp-p5xm · CVE-2026-115893 Not analysed yet 28 Oct 2026
CVE-2026-76469 CVE record

CVSS 7.4 High

Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities
- Cisco Campus Gateway Software
- Cisco Meraki MR Wireless Access Points Software
- CWE-691
Not analysed yet 7 Oct 2026
vyper PyPI

CVSS 6.3 Medium

Vyper: Return inside for loop more than 1 level deep
- CWE-670
- CWE-691
>=0.1.0b10, <0.2.3 · fixed in 0.2.3

GHSA-vg88-3v92-rjx2 · CVE-2020-37288 Not analysed yet 6 Oct 2026
CVE-2026-20276 CVE record

CVSS 8.6 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-691
Not analysed yet 2 Sept 2026
CVE-2025-51675 CVE record

CVSS 7.5 High

An issue was discovered in openRISC OR1200 commit 83ac6b.
- CWE-691
Not analysed yet 26 Aug 2026
CVE-2026-79033 CVE record

CVSS 8.8 High

Google Chrome: Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65…
- Google Chrome
- CWE-691
Not analysed yet 25 Aug 2026
CVE-2026-20271 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- CWE-691
Not analysed yet 5 Aug 2026
CVE-2026-43503 CVE record

CVSS 8.8 High

net: skbuff: propagate shared-frag marker through frag-transfer helpers
- Linux kernel
- CWE-664
- CWE-691
Not analysed yet 23 May 2026
CVE-2026-5938 CVE record

CVSS 5.5 Medium

Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability
- Foxit Software Inc. Foxit PDF Editor
- Foxit Software Inc. Foxit PDF Reader
- CWE-691
Not analysed yet 27 Apr 2026
CVE-2025-35963 CVE record

CVSS 8.3 High

Intel(R) PROSet/Wireless WiFi Software for Windows: Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for…
- Intel(R) PROSet/Wireless WiFi Software for Windows
- CWE-691
Not analysed yet 11 Nov 2025
CVE-2025-25273 CVE record

CVSS 8.8 High

Intel(R) 700 Series Ethernet: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R)…
- Intel(R) 700 Series Ethernet
- CWE-691
Not analysed yet 12 Aug 2025
CVE-2025-24305 CVE record

CVSS 7.0 High

Intel(R) Xeon(R) processors: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware…
- Intel(R) Xeon(R) processors
- CWE-691
Not analysed yet 12 Aug 2025
CVE-2025-22893 CVE record

CVSS 8.8 High

Intel(R) 800 Series Ethernet: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R)…
- Intel(R) 800 Series Ethernet
- CWE-691
Not analysed yet 12 Aug 2025
CVE-2025-49463 CVE record

CVSS 6.5 Medium

Zoom Clients for iOS - Insufficient Control Flow Management
- Zoom Communications Inc. Zoom Clients for iOS
- CWE-691
Not analysed yet 10 Jul 2025
vyper PyPI

CVSS 2.9 Low

Vyper's `slice()` may elide side-effects when output length is 0
- CWE-691
<=0.4.2rc1 · no fixed version yet

GHSA-3vcg-j39x-cwfm · CVE-2025-47774 Not analysed yet 16 May 2025
vyper PyPI

CVSS 2.9 Low

Vyper's `concat()` builtin may elide side-effects for zero-length arguments
- CWE-691
<=0.4.2rc1 · no fixed version yet

GHSA-qhr6-mgqr-mchm · CVE-2025-47285 Not analysed yet 16 May 2025
CVE-2025-20022 CVE record

CVSS 5.8 Medium

Edge Orchestrator software for Intel(R) Tiber™ Edge Platform: Insufficient control flow management for some Edge Orchestrator software for Intel(R)…
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CWE-691
Not analysed yet 13 May 2025
CVE-2025-20004 CVE record

CVSS 8.5 High

Intel(R) Xeon(R) 6 processor E-Cores firmware: Insufficient control flow management in the Alias Checking Trusted Module for some…
- Intel(R) Xeon(R) 6 processor E-Cores firmware
- CWE-691
Not analysed yet 13 May 2025
CVE-2025-25774 CVE record

CVSS 6.5 Medium

An issue was discovered in Open5GS v2.7.2.
- CWE-691
Not analysed yet 12 Mar 2025
CVE-2024-33617 CVE record

CVSS 8.2 High

Intel(R) QAT Engine for OpenSSL software: Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software…
- Intel(R) QAT Engine for OpenSSL software
- CWE-691
Not analysed yet 13 Nov 2024
CVE-2024-29079 CVE record

CVSS 6.9 Medium

Intel(R) VROC software: Insufficient control flow management in some Intel(R) VROC software before version…
- Intel(R) VROC software
- CWE-691
Not analysed yet 13 Nov 2024
CVE-2024-25565 CVE record

CVSS 4.8 Medium

Intel(R) Xeon(R) Processors: Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R)…
- Intel(R) Xeon(R) Processors
- CWE-691
Not analysed yet 13 Nov 2024
CVE-2024-21801 CVE record

CVSS 8.3 High

Intel(R) TDX module software: Insufficient control flow management in some Intel(R) TDX module software before version…
- Intel(R) TDX module software
- CWE-691
Not analysed yet 14 Aug 2024
CVE-2024-22374 CVE record

CVSS 6.8 Medium

Intel(R) Xeon Processors: Insufficient control flow management for some Intel(R) Xeon Processors may allow an…
- Intel(R) Xeon Processors
- CWE-691
Not analysed yet 14 Aug 2024
github.com/evmos/evmos/v10 +11 Go

CVSS 3.5 Low

evmos allows transferring unvested tokens after delegations
- Broken access control
- CWE-682
<18.0.0 · fixed in 18.0.0

GHSA-pxv8-qhrh-jc7v · CVE-2024-32873 Not analysed yet 6 Jun 2024
CVE-2021-33157 CVE record

CVSS 7.2 High

Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…: Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R)…
- Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware
- CWE-691
Not analysed yet 16 May 2024
CVE-2024-3847 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Google Chrome: Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed…
- Google Chrome
- CWE-305
- CWE-691
Not analysed yet 17 Apr 2024
CVE-2023-24587 CVE record

CVSS 6.9 Medium

Intel(R) Optane(TM) SSD products: Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD…
- Intel(R) Optane(TM) SSD products
- CWE-691
Not analysed yet 14 Nov 2023
CVE-2022-46299 CVE record

CVSS 3.3 Low

Intel Unison software: Insufficient control flow management for some Intel Unison software may allow an…
- Intel Unison software
- CWE-691
Not analysed yet 14 Nov 2023
CVE-2023-5102 CVE record

CVSS 5.3 Medium

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.
- SICK AG APU0200
- CWE-691
Not analysed yet 9 Oct 2023
CVE-2023-44384 CVE record

CVSS 4.1 Medium

Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location
- discourse-jira
- CWE-691
Not analysed yet 6 Oct 2023
CVE-2023-28711 CVE record

CVSS 5.5 Medium

Hyperscan Library maintained by Intel(R): Insufficient control flow management in the Hyperscan Library maintained by Intel(R)…
- Hyperscan Library maintained by Intel(R)
- CWE-691
Not analysed yet 11 Aug 2023
CVE-2022-43505 CVE record

CVSS 4.1 Medium

Intel(R) Processors: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors…
- Intel(R) Processors
- CWE-691
Not analysed yet 11 Aug 2023
CVE-2022-41646 CVE record

CVSS 4.7 Medium

Intel(R) IPP Cryptography software: Insufficient control flow management in the Intel(R) IPP Cryptography software before…
- Intel(R) IPP Cryptography software
- CWE-691
Not analysed yet 10 May 2023
CVE-2022-37409 CVE record

CVSS 4.7 Medium

Intel(R) IPP Cryptography software: Insufficient control flow management for the Intel(R) IPP Cryptography software before…
- Intel(R) IPP Cryptography software
- CWE-691
Not analysed yet 10 May 2023
CVE-2022-48481 CVE record

CVSS 5.2 Medium

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible
- JetBrains Toolbox App
- CWE-691
Not analysed yet 28 Apr 2023
CVE-2023-20559 CVE record

CVSS 8.8 High

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-691
Not analysed yet 23 Mar 2023
CVE-2022-46828 CVE record

CVSS 5.2 Medium

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
- JetBrains IntelliJ IDEA
- CWE-691
Not analysed yet 8 Dec 2022
CVE-2022-20697 CVE record

CVSS 8.6 High

Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability
- Cisco IOS
- CWE-691
Not analysed yet 15 Apr 2022
CVE-2021-4106 CVE record

CVSS 7.8 High

Vulnerability in Snow Inventory Java Scanner
- Snow Inventory Java Scanner
- CWE-691
Not analysed yet 16 Feb 2022
CVE-2021-0157 CVE record

CVSS 6.7 Medium

Intel(R) Processors: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors…
- Intel(R) Processors
- CWE-691
Not analysed yet 17 Nov 2021
CVE-2020-12359 CVE record

CVSS 6.8 Medium

Intel(R) Processors: Insufficient control flow management in the firmware for some Intel(R) Processors may…
- Intel(R) Processors
- CWE-691
Not analysed yet 9 Jun 2021