# CWE-703. Every Advisory and CVE whose sources give the weakness CWE-703, newest first. ## Records, newest first (an older page) - [S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().](https://agentprime.io/advisories/CVE-2023-45927.md) `CVE-2023-45927` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-703 - [printer_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might allow attackers to cause a denial of service or have unspec…](https://agentprime.io/advisories/CVE-2024-25741.md) `CVE-2024-25741` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 12 Feb 2024 · Tags: CWE-703 - [Improper Check or Handling of Exceptional Conditions in Aveva PI Server](https://agentprime.io/advisories/CVE-2023-34348.md) `CVE-2023-34348` · CVE record: Aveva PI Server · CVSS 7.5 High · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-703, CWE-754 - [Junos OS: jdhcpd will hang on receiving a specific DHCP packet](https://agentprime.io/advisories/CVE-2023-36842.md) `CVE-2023-36842` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-703 - [Rust EVM erroneousle handles \`record_external_operation\` error return](https://agentprime.io/advisories/GHSA-27wg-99g8-2v4v.md) `GHSA-27wg-99g8-2v4v`, `CVE-2024-21629` · crates.io `evm`: affected `<0.41.1`, fixed in `0.41.1` · CVSS 5.9 Medium · Not analysed yet · Published 3 Jan 2024 · Tags: CWE-703 - [FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation](https://agentprime.io/advisories/CVE-2023-51443.md) `CVE-2023-51443` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 27 Dec 2023 · Tags: CWE-703 - [An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.](https://agentprime.io/advisories/CVE-2023-35867.md) `CVE-2023-35867` · CVE record: Bosch BVMS and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-703 - [An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.](https://agentprime.io/advisories/CVE-2023-32230.md) `CVE-2023-32230` · CVE record: Bosch Video Recording Manager and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-703 - [Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation](https://agentprime.io/advisories/CVE-2023-49786.md) `CVE-2023-49786` · CVE record: asterisk asterisk · CVSS 7.5 High · Not analysed yet · Published 14 Dec 2023 · Tags: CWE-703 - [Calico Typha denial of service vulnerability](https://agentprime.io/advisories/GHSA-5r5h-q934-cccp.md) `GHSA-5r5h-q934-cccp`, `CVE-2023-41378` · Go `github.com/projectcalico/calico`: affected `<=3.25.1 || >=3.26.0, <3.26.3`, fixed in `3.26.3` · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2023 · Tags: Denial of service, CWE-703, CWE-755 - [Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions](https://agentprime.io/advisories/GHSA-r344-xw3p-2frj.md) `GHSA-r344-xw3p-2frj`, `CVE-2023-45812` · crates.io `apollo-router`: affected `>=1.31.0, <1.33.0`, fixed in `1.33.0` · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-703, CWE-754 - [The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y.](https://agentprime.io/advisories/CVE-2023-5563.md) `CVE-2023-5563` · CVE record: zephyrproject-rtos Zephyr · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-703 - [Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN](https://agentprime.io/advisories/CVE-2023-44203.md) `CVE-2023-44203` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-703 - [An unhandled edge case in the component \_sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file.](https://agentprime.io/advisories/CVE-2023-39136.md) `CVE-2023-39136` · CVE record · No CVSS score · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received](https://agentprime.io/advisories/CVE-2023-36849.md) `CVE-2023-36849` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-703 - [Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied](https://agentprime.io/advisories/CVE-2023-36831.md) `CVE-2023-36831` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-703 - [VTAdmin users that can create shards can deny access to other functions](https://agentprime.io/advisories/GHSA-pqj7-jx24-wj7w.md) `GHSA-pqj7-jx24-wj7w`, `CVE-2023-29195` · Go `vitess.io/vitess`: affected `<0.16.2`, fixed in `0.16.2` · CVSS 4.1 Medium · Not analysed yet · Published 11 May 2023 · Tags: CWE-20, CWE-703 - [NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial…](https://agentprime.io/advisories/CVE-2023-0204.md) `CVE-2023-0204` · CVE record: NVIDIA NVIDIA ConnectX Firmware · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2023 · Tags: CWE-703 - [Junos OS: JRR200: Kernel crash upon receipt of a specific packet](https://agentprime.io/advisories/CVE-2023-28970.md) `CVE-2023-28970` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service](https://agentprime.io/advisories/CVE-2023-28965.md) `CVE-2023-28965` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets](https://agentprime.io/advisories/CVE-2023-28959.md) `CVE-2023-28959` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [PAN-OS: Local File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2023-0004.md) `CVE-2023-0004` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-703 - [vitess allows users to create keyspaces that can deny access to already existing keyspaces](https://agentprime.io/advisories/GHSA-735r-hv67-g38f.md) `GHSA-735r-hv67-g38f`, `CVE-2023-29194`, `GO-2023-1717` · Go `vitess.io/vitess`: affected `<0.16.1`, fixed in `0.16.1` · CVSS 4.1 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-20, CWE-703 - [Android: In BitmapExport.java, there is a possible failure to truncate images due to a logic error…](https://agentprime.io/advisories/CVE-2023-21036.md) `CVE-2023-21036` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-703 - [Android: In updateInputChannel of WindowManagerService.java…](https://agentprime.io/advisories/CVE-2023-21026.md) `CVE-2023-21026` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-703 - [DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer](https://agentprime.io/advisories/CVE-2021-3329.md) `CVE-2021-3329` · CVE record: zephyrproject-rtos zephyr · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Feb 2023 · Tags: CWE-703 - [DoS: Invalid Initialization in le_read_buffer_size_complete](https://agentprime.io/advisories/CVE-2023-0397.md) `CVE-2023-0397` · CVE record: zephyrproject-rtos zephyr · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-703 - [Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets](https://agentprime.io/advisories/CVE-2023-22413.md) `CVE-2023-22413` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-703 - [Mozilla Firefox: If there was a PAC URL set and the server that hosts the PAC was not reachable…](https://agentprime.io/advisories/CVE-2022-34472.md) `CVE-2022-34472` · CVE record: Mozilla Firefox and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-703 - [Samsung Mobile Samsung Pass: Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior…](https://agentprime.io/advisories/CVE-2022-39911.md) `CVE-2022-39911` · CVE record: Samsung Mobile Samsung Pass · CVSS 4.8 Medium · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-703 - [nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit](https://agentprime.io/advisories/GHSA-x2jx-w3wm-9p3p.md) `GHSA-x2jx-w3wm-9p3p`, `CVE-2022-41777` · npm `nadesiko3`: affected `<3.3.75`, fixed in `3.3.75` · CVSS 5.3 Medium · Not analysed yet · Published 5 Dec 2022 · Tags: CWE-703, CWE-755 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco…](https://agentprime.io/advisories/CVE-2022-20924.md) `CVE-2022-20924` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-703 - [ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because tha…](https://agentprime.io/advisories/CVE-2021-42205.md) `CVE-2021-42205` · CVE record · CVSS 4.7 Medium · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV](https://agentprime.io/advisories/CVE-2022-22224.md) `CVE-2022-22224` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-703 - [The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.](https://agentprime.io/advisories/CVE-2022-41589.md) `CVE-2022-41589` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-703 - [Denial of service due to incorrect application of event authorization rules](https://agentprime.io/advisories/GHSA-jhjh-776m-4765.md) `GHSA-jhjh-776m-4765`, `CVE-2022-31152`, `PYSEC-2022-262` · PyPI `matrix-synapse`: affected `<1.62.0rc1`, fixed in `1.62.0rc1` · CVSS 6.4 Medium · Not analysed yet · Published 31 Aug 2022 · Tags: CWE-703, CWE-755 - [Algorithm incorrectly returning error and Invalid unreduced value written to output buffer](https://agentprime.io/advisories/CVE-2022-23004.md) `CVE-2022-23004` · CVE record: Western Digital Sweet B Library · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-703, CWE-707 - [Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero](https://agentprime.io/advisories/CVE-2022-23003.md) `CVE-2022-23003` · CVE record: Western Digital Sweet B Library · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-703 - [Point Compression/Decompression of NIST P-256 points with X coordinate of zero](https://agentprime.io/advisories/CVE-2022-23002.md) `CVE-2022-23002` · CVE record: Western Digital Sweet B Library · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-703 - [Denial of service in Open Policy Agent](https://agentprime.io/advisories/GHSA-2m4x-4q9j-w97g.md) `GHSA-2m4x-4q9j-w97g`, `CVE-2022-33082`, `GO-2022-0574` · Go `github.com/open-policy-agent/opa`: affected `<0.42.0`, fixed in `0.42.0` · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2022 · Tags: CWE-703 - [BT: Invalid channel map in CONNECT_IND results to Deadlock](https://agentprime.io/advisories/CVE-2021-3433.md) `CVE-2021-3433` · CVE record: zephyrproject-rtos zephyr · CVSS 4.0 Medium · Not analysed yet · Published 28 Jun 2022 · Tags: CWE-703 - [Samsung Mobile Samsung Internet: Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof…](https://agentprime.io/advisories/CVE-2022-30738.md) `CVE-2022-30738` · CVE record: Samsung Mobile Samsung Internet · CVSS 4.3 Medium · Not analysed yet · Published 7 Jun 2022 · Tags: CWE-703 - [Samsung Mobile Samsung Pass: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical…](https://agentprime.io/advisories/CVE-2022-27841.md) `CVE-2022-27841` · CVE record: Samsung Mobile Samsung Pass · CVSS 4.3 Medium · Not analysed yet · Published 11 Apr 2022 · Tags: CWE-703 - [Unhandled case in node-lmdb](https://agentprime.io/advisories/GHSA-32j9-6qqm-mq9g.md) `GHSA-32j9-6qqm-mq9g`, `CVE-2022-21164`, `SNYK-JS-NODELMDB-2400723` · npm `node-lmdb`: affected `<0.9.7`, fixed in `0.9.7` · CVSS 3.7 Low · Not analysed yet · Published 17 Mar 2022 · Tags: CWE-241, CWE-703 - [PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions](https://agentprime.io/advisories/CVE-2022-25252.md) `CVE-2022-25252` · CVE record: PTC Axeda agent and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Mar 2022 · Tags: CWE-703 - [GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon](https://agentprime.io/advisories/CVE-2022-0016.md) `CVE-2022-0016` · CVE record: Palo Alto Networks GlobalProtect App · CVSS 7.4 High · Not analysed yet · Published 10 Feb 2022 · Tags: CWE-703 - [Samsung Mobile Samsung Internet: Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows…](https://agentprime.io/advisories/CVE-2022-22290.md) `CVE-2022-22290` · CVE record: Samsung Mobile Samsung Internet · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2022 · Tags: CWE-703 - [An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.](https://agentprime.io/advisories/CVE-2022-22265.md) `CVE-2022-22265` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.0 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-703 - [Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products](https://agentprime.io/advisories/CVE-2021-23859.md) `CVE-2021-23859` · CVE record: Bosch BVMS and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-703 - [Samsung Mobile Samsung Pay: Improper check or handling of exception conditions vulnerability in Samsung Pay (US only)…](https://agentprime.io/advisories/CVE-2021-25525.md) `CVE-2021-25525` · CVE record: Samsung Mobile Samsung Pay · CVSS 2.0 Low · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-703 - [An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.](https://agentprime.io/advisories/CVE-2021-25516.md) `CVE-2021-25516` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-703 - [Overriding the system configuration file causes a denial of service](https://agentprime.io/advisories/CVE-2021-23261.md) `CVE-2021-23261` · CVE record: Crafter Software Crafter CMS · CVSS 4.5 Medium · Not analysed yet · Published 2 Dec 2021 · Tags: CWE-703 - [Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart](https://agentprime.io/advisories/CVE-2021-0286.md) `CVE-2021-0286` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-703 - [Samsung Mobile Samsung Health: Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to…](https://agentprime.io/advisories/CVE-2021-25425.md) `CVE-2021-25425` · CVE record: Samsung Mobile Samsung Health · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-703 - [Samsung Mobile Samsung Internet: Non-compliance of recommended secure coding scheme in Samsung Internet prior to version…](https://agentprime.io/advisories/CVE-2021-25419.md) `CVE-2021-25419` · CVE record: Samsung Mobile Samsung Internet · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-703 - [Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device.](https://agentprime.io/advisories/CVE-2021-25409.md) `CVE-2021-25409` · CVE record: Samsung Mobile Samsung Mobile Devices · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured](https://agentprime.io/advisories/CVE-2021-0264.md) `CVE-2021-0264` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703 - [Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart](https://agentprime.io/advisories/CVE-2021-0241.md) `CVE-2021-0241` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703 - [Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.](https://agentprime.io/advisories/CVE-2021-0240.md) `CVE-2021-0240` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703 - [Samsung Mobile Bixby: Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows…](https://agentprime.io/advisories/CVE-2021-25380.md) `CVE-2021-25380` · CVE record: Samsung Mobile Bixby · CVSS 5.8 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: CWE-703 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .