# CWE-703.

Every Advisory and CVE whose sources give the weakness CWE-703, newest first.

## Records, newest first

- [LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling](https://agentprime.io/advisories/CVE-2026-54610.md)
  `CVE-2026-54610` · CVE record: LibreDWG libredwg · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-471, CWE-703
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2026-112684.md)
  `CVE-2026-112684` · CVE record: Apple Safari and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-703
- [A logic issue was addressed with improved validation.](https://agentprime.io/advisories/CVE-2026-65368.md)
  `CVE-2026-65368` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-703
- [Improper Check or Handling of Exceptional Conditions in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76527.md)
  `CVE-2026-76527` · CVE record: Splunk Splunk SOAR · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-703
- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76481.md)
  `CVE-2026-76481` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-703
- [A logic issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2026-84579.md)
  `CVE-2026-84579` · CVE record: Apple macOS · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-703
- [Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76458.md)
  `CVE-2026-76458` · CVE record: Cisco Cisco NX-OS Software and 2 more · CVSS 8.6 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-703
- [vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process](https://agentprime.io/advisories/GHSA-2v2p-6j97-cjg9.md)
  `GHSA-2v2p-6j97-cjg9`, `CVE-2026-100722` · npm `vm2`: affected `<3.12.2`, fixed in `3.12.2` · CVSS 8.9 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-248, CWE-703
- [vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process](https://agentprime.io/advisories/GHSA-gjq8-xm47-88rc.md)
  `GHSA-gjq8-xm47-88rc`, `CVE-2026-92954` · npm `vm2`: affected `>=3.10.0, <3.11.8`, fixed in `3.11.8` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-248, CWE-703
- [pg_partman disable maintenance for all partition sets](https://agentprime.io/advisories/CVE-2026-61822.md)
  `CVE-2026-61822` · CVE record: pgpartman pg_partman · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-703
- [Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware](https://agentprime.io/advisories/CVE-2026-32641.md)
  `CVE-2026-32641` · CVE record: parseablehq parseable · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-248, CWE-703
- [Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header](https://agentprime.io/advisories/CVE-2026-92790.md)
  `CVE-2026-92790` · CVE record: higress-group higress · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-703
- [Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabi…](https://agentprime.io/advisories/CVE-2026-20329.md)
  `CVE-2026-20329` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 2 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-703
- [An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine](https://agentprime.io/advisories/CVE-2026-71645.md)
  `CVE-2026-71645` · CVE record · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-703
- [An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replann…](https://agentprime.io/advisories/CVE-2026-71640.md)
  `CVE-2026-71640` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-703
- [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability.](https://agentprime.io/advisories/CVE-2026-80135.md)
  `CVE-2026-80135` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-703
- [Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve](https://agentprime.io/advisories/CVE-2026-57445.md)
  `CVE-2026-57445` · CVE record: 1Hive gardens-v2 · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-703
- [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20280.md)
  `CVE-2026-20280` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-703
- [qs: Denial of Service via Attacker Controlled isBuffer](https://agentprime.io/advisories/GHSA-4mjr-xmp4-gh2g.md)
  `GHSA-4mjr-xmp4-gh2g`, `CVE-2026-82417` · npm `qs`: affected `>=2.2.5, <6.16.0`, fixed in `6.16.0` · CVSS 6.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-248, CWE-703
- [Stomper 5e2741e is vulnerable to Denial of Service.](https://agentprime.io/advisories/CVE-2026-26446.md)
  `CVE-2026-26446` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-703
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2026-65331.md)
  `CVE-2026-65331` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-703
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2026-65351.md)
  `CVE-2026-65351` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-703
- [Improper input validation in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-65340.md)
  `CVE-2026-65340` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-20, CWE-703
- [Improper input validation in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-65337.md)
  `CVE-2026-65337` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-20, CWE-703
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2026-65332.md)
  `CVE-2026-65332` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-703
- [CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.](https://agentprime.io/advisories/CVE-2025-59322.md)
  `CVE-2025-59322` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-329, CWE-703
- [Velociraptor server crash via the SetPassword API](https://agentprime.io/advisories/CVE-2026-18638.md)
  `CVE-2026-18638` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-703
- [Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state](https://agentprime.io/advisories/GHSA-p9jm-q85p-7mcp.md)
  `GHSA-p9jm-q85p-7mcp`, `CVE-2026-56818` · Maven `io.netty:netty-codec-redis`: affected `<4.1.136.Final || >=4.2.0-Final, <4.2.16.Final`, fixed in `4.1.136.Final`, `4.2.16.Final` · CVSS 6.5 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Denial of service, CWE-703
- [ImageMagick: Heap-use-after-free via XMP profile could result in a crash](https://agentprime.io/advisories/GHSA-qh5g-q395-cx4j.md)
  `GHSA-qh5g-q395-cx4j`, `CVE-2026-61857` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service, Memory corruption, CWE-252, CWE-703
- [An issue in Unistal Systems Pvt.](https://agentprime.io/advisories/CVE-2026-38763.md)
  `CVE-2026-38763` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Denial of service, CWE-703
- [hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions](https://agentprime.io/advisories/CVE-2026-16218.md)
  `CVE-2026-16218` · CVE record: hunvreus devpush · CVSS 2.1 Low · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-703
- [Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20187.md)
  `CVE-2026-20187` · CVE record: Cisco Cisco RoomOS Software · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-703
- [Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods).](https://agentprime.io/advisories/CVE-2026-51600.md)
  `CVE-2026-51600` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Denial of service, CWE-703
- [Certain HP DeskJet All in One – Potential Information Disclosure](https://agentprime.io/advisories/CVE-2026-13753.md)
  `CVE-2026-13753` · CVE record: HP Inc HP DeskJet 2820 AIO Printer and 4 more · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-703
- [Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint](https://agentprime.io/advisories/CVE-2026-56338.md)
  `CVE-2026-56338` · CVE record: Capgo Capgo · CVSS 6.9 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-703
- [Incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-12324.md)
  `CVE-2026-12324` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-703
- [Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length](https://agentprime.io/advisories/GHSA-cc37-9q2j-3hfv.md)
  `GHSA-cc37-9q2j-3hfv`, `CVE-2026-44893` · Maven `io.netty:netty-codec-haproxy`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: Memory corruption, CWE-703
- [Samsung Open Source Escargot: Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source…](https://agentprime.io/advisories/CVE-2026-47316.md)
  `CVE-2026-47316` · CVE record: Samsung Open Source Escargot · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-703
- [XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handling flaw in its CSR subsystem (N…](https://agentprime.io/advisories/CVE-2026-29643.md)
  `CVE-2026-29643` · CVE record · CVSS 7.1 High · Not analysed yet · Published 20 Apr 2026 · Tags: CWE-703
- [Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint](https://agentprime.io/advisories/GHSA-w254-4hp5-7cvv.md)
  `GHSA-w254-4hp5-7cvv`, `CVE-2026-34388`, `GO-2026-4915` · Go `github.com/fleetdm/fleet/v4`: affected `<4.81.0`, fixed in `4.81.0` · CVSS 6.6 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-703
- [iccDEV has a SEGV in CIccCLUT::Interp3d()](https://agentprime.io/advisories/CVE-2026-31794.md)
  `CVE-2026-31794` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-703
- [iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence()](https://agentprime.io/advisories/CVE-2026-31793.md)
  `CVE-2026-31793` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-703
- [HTTP 5XX Internal Server Errors](https://agentprime.io/advisories/CVE-2025-59787.md)
  `CVE-2025-59787` · CVE record: 2N Telekomunikace a.s. 2N Access Commander · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-703
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0011.md)
  `CVE-2026-0011` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693, CWE-703
- [malcontent: Nested archive extraction failure can drop content from scan inputs](https://agentprime.io/advisories/GHSA-945p-3jhm-6rcp.md)
  `GHSA-945p-3jhm-6rcp`, `CVE-2026-28407`, `GO-2026-4577` · Go `github.com/chainguard-dev/malcontent`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 6.9 Medium · Not analysed yet · Published 28 Feb 2026 · Tags: CWE-703
- [rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895](https://agentprime.io/advisories/GHSA-7587-4wv6-m68m.md)
  `GHSA-7587-4wv6-m68m` · crates.io `pgp`: affected `>=0.16.0-alpha.0, <0.19.0`, fixed in `0.19.0` · CVSS 4.0, no score published · Not analysed yet · Published 13 Feb 2026 · Tags: CWE-703
- [Protection mechanism failure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2025-46290.md)
  `CVE-2025-46290` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-693, CWE-703
- [An inconsistent user interface issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2026-20640.md)
  `CVE-2026-20640` · CVE record: Apple iOS and iPadOS · CVSS 4.6 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-703
- [Certain HP OfficeJet Pro Printers – Denial of Service](https://agentprime.io/advisories/CVE-2026-1996.md)
  `CVE-2026-1996` · CVE record: HP Inc HP OfficeJet Pro 8710 All-in-One Printer series · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-703
- [Emmett-Core: Unhandled CookieError Exception Causing Denial of Service](https://agentprime.io/advisories/GHSA-x6cr-mq53-cc76.md)
  `GHSA-x6cr-mq53-cc76`, `CVE-2026-25577`, `PYSEC-2026-2469` · PyPI `emmett-core`: affected `<1.3.11`, fixed in `1.3.11` · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2026 · Tags: Authentication bypass, CWE-248, CWE-703
- [Decidim's private data exports can lead to data leaks](https://agentprime.io/advisories/GHSA-3cx6-j9j4-54mp.md)
  `GHSA-3cx6-j9j4-54mp`, `CVE-2025-65017` · RubyGems `decidim` and 1 more: affected `>=0.30.0, <0.30.4`, fixed in `0.30.4` · CVSS 8.2 High · Not analysed yet · Published 3 Feb 2026 · Tags: Information disclosure, CWE-703
- [chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php.](https://agentprime.io/advisories/CVE-2025-70758.md)
  `CVE-2025-70758` · CVE record · CVSS 7.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-703
- [Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out](https://agentprime.io/advisories/CVE-2026-21720.md)
  `CVE-2026-21720` · CVE record: Grafana grafana/grafana-enterprise and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: Denial of service, CWE-703
- [CometBFT has inconsistencies between how commit signatures are verified and how block time is derived](https://agentprime.io/advisories/GHSA-c32p-wcqj-j677.md)
  `GHSA-c32p-wcqj-j677`, `GO-2026-4361` · Go `github.com/cometbft/cometbft`: affected `<0.37.18 || >=0.38.0-alpha.1, <0.38.21`, fixed in `0.37.18`, `0.38.21` · CVSS 4.0, no score published · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-703
- [EVerest's inadequate exception handling leads to denial of service](https://agentprime.io/advisories/CVE-2025-68135.md)
  `CVE-2025-68135` · CVE record: EVerest everest-core · CVSS 6.5 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-703
- [rsa crate has potential panic on a prime being equal to 1](https://agentprime.io/advisories/GHSA-9c48-w39g-hm26.md)
  `GHSA-9c48-w39g-hm26`, `CVE-2026-21895` · crates.io `rsa`: affected `<0.9.10`, fixed in `0.9.10` · CVSS 2.7 Low · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-703
- [iccDEV has Type Confusion during XML Curve Serialization](https://agentprime.io/advisories/CVE-2026-21493.md)
  `CVE-2026-21493` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.6 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-188, CWE-703
- [Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion](https://agentprime.io/advisories/GHSA-46j5-6fg5-4gv3.md)
  `GHSA-46j5-6fg5-4gv3` · npm `nodemailer`: affected `<7.0.11`, fixed in `7.0.11` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 18 Dec 2025 · Tags: Denial of service, CWE-703
- [Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls](https://agentprime.io/advisories/GHSA-rcmh-qjqh-p98v.md)
  `GHSA-rcmh-qjqh-p98v`, `CVE-2025-14874` · Maven `org.webjars.npm:nodemailer` and 1 more: affected `>=3.0.0, <=6.10.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2025 · Tags: CWE-703
- [Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13026.md)
  `CVE-2025-13026` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703

Older: <https://agentprime.io/advisories/tag/cwe-703.md?cursor=WyIyMDI1LTExLTExVDE1OjQ3OjE1LjY5NTAwMFoiLCJDVkUtMjAyNS0xMzAyNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-703>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-703/>. Everything for agents: <https://agentprime.io/llms.txt>.