Advisories · Weakness
CWE-703.
Every Advisory and CVE whose sources give the weakness CWE-703, newest first.
- CVSS 3.3 Low
LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling
- libredwg
- CWE-471
- CWE-703
- CVSS 4.3 Medium
This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
- CWE-703
- CVSS 5.5 Medium
A logic issue was addressed with improved validation.
- Apple macOS
- CWE-703
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper Check or Handling of Exceptional Conditions in Splunk SOAR
- Splunk SOAR
- CWE-703
- CVSS 7.5 High
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-703
- CVSS 8.8 High
A logic issue was addressed with improved checks.
- Apple macOS
- CWE-703
- CVSS 8.6 High
Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
- Cisco NX-OS Software
- Cisco NX-OS System Software in ACI Mode
- CWE-703
- CVSS 8.9 High
vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
- CWE-248
- CWE-703
<3.12.2 · fixed in 3.12.2
GHSA-2v2p-6j97-cjg9 · CVE-2026-100722 - CVSS 9.2 CriticalCritical · CVSS 9+
vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
- CWE-248
- CWE-703
>=3.10.0, <3.11.8 · fixed in 3.11.8
GHSA-gjq8-xm47-88rc · CVE-2026-92954 - CVSS 6.5 Medium
pg_partman disable maintenance for all partition sets
- pgpartman pg_partman
- CWE-703
- CVSS 7.5 High
Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
- parseable
- CWE-248
- CWE-703
- CVSS 6.9 Medium
Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header
- higress
- CWE-703
- CVSS 9.9 CriticalCritical · CVSS 9+
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabi…
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Management Center (FMC)
- CWE-703
- CVSS 7.5 High
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine
- CWE-703
- CVSS 9.1 CriticalCritical · CVSS 9+
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replann…
- CWE-703
- CVSS 7.5 High
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability.
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- CWE-703
- CVSS 8.7 High
Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve
- 1Hive gardens-v2
- CWE-703
- CVSS 8.8 High
Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-703
- CVSS 6.3 Medium
qs: Denial of Service via Attacker Controlled isBuffer
- CWE-248
- CWE-703
>=2.2.5, <6.16.0 · fixed in 6.16.0
GHSA-4mjr-xmp4-gh2g · CVE-2026-82417 - CVSS 7.5 High
Stomper 5e2741e is vulnerable to Denial of Service.
- CWE-703
- CVSS 4.3 Medium
This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
- CWE-703
- CVSS 4.3 Medium
This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
- CWE-703
- CVSS 4.3 Medium
Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
- CVSS 4.3 Medium
Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
- CVSS 4.3 Medium
This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
- CWE-703
- CVSS 7.5 High
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.
- CWE-329
- CWE-703
- CVSS 6.5 Medium
Velociraptor server crash via the SetPassword API
- Rapid7 Velociraptor
- Memory corruption
- CWE-703
- CVSS 6.5 Medium
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
- Denial of service
- CWE-703
<4.1.136.Final || >=4.2.0-Final, <4.2.16.Final · fixed in 4.1.136.Final, 4.2.16.Final
GHSA-p9jm-q85p-7mcp · CVE-2026-56818 - CVSS 6.3 Medium
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
- Denial of service
- Memory corruption
<14.15.0 · fixed in 14.15.0
GHSA-qh5g-q395-cx4j · CVE-2026-61857 - CVSS 5.5 Medium
An issue in Unistal Systems Pvt.
- Denial of service
- CWE-703
- CVSS 2.1 Low
hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions
- hunvreus devpush
- CWE-703
- CVSS 7.5 High
Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities
- Cisco RoomOS Software
- CWE-703
- CVSS 7.5 High
Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods).
- Denial of service
- CWE-703
- CVSS 7.5 High
Certain HP DeskJet All in One – Potential Information Disclosure
- HP Inc HP DeskJet 2820 AIO Printer
- HP Inc HP DeskJet 2823 AIO Printer
- CWE-703
- CVSS 6.9 Medium
Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint
- Capgo
- CWE-703
- CVSS 7.3 High
Incorrect boundary conditions in the Graphics: CanvasWebGL component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703
- CVSS 7.5 High
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
- Memory corruption
- CWE-703
>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final · fixed in 4.2.15.Final, 4.1.135.Final
GHSA-cc37-9q2j-3hfv · CVE-2026-44893 - CVSS 5.5 Medium
Samsung Open Source Escargot: Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source…
- Samsung Open Source Escargot
- CWE-703
- CVSS 7.1 High
XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handling flaw in its CSR subsystem (N…
- CWE-703
- CVSS 6.6 Medium
Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint
- CWE-703
<4.81.0 · fixed in 4.81.0
GHSA-w254-4hp5-7cvv · CVE-2026-34388 - CVSS 5.5 Medium
iccDEV has a SEGV in CIccCLUT::Interp3d()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-703
- CVSS 5.5 Medium
iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-703
- CVSS 5.3 Medium
HTTP 5XX Internal Server Errors
- 2N Telekomunikace a.s. 2N Access Commander
- CWE-703
- CVSS 8.4 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CWE-703
- CVSS 6.9 Medium
malcontent: Nested archive extraction failure can drop content from scan inputs
- CWE-703
<1.21.0 · fixed in 1.21.0
GHSA-945p-3jhm-6rcp · CVE-2026-28407 - CVSS 4.0, no score published
rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895
- CWE-703
>=0.16.0-alpha.0, <0.19.0 · fixed in 0.19.0
GHSA-7587-4wv6-m68m - CVSS 7.5 High
Protection mechanism failure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-693
- CWE-703
- CVSS 4.6 Medium
An inconsistent user interface issue was addressed with improved state management.
- Apple iOS and iPadOS
- CWE-703
- CVSS 6.9 Medium
Certain HP OfficeJet Pro Printers – Denial of Service
- HP Inc HP OfficeJet Pro 8710 All-in-One Printer series
- CWE-703
- CVSS 7.5 High
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service
- Authentication bypass
- CWE-248
<1.3.11 · fixed in 1.3.11
GHSA-x6cr-mq53-cc76 · CVE-2026-25577 - CVSS 8.2 High
Decidim's private data exports can lead to data leaks
- Information disclosure
- CWE-703
>=0.30.0, <0.30.4 · fixed in 0.30.4
GHSA-3cx6-j9j4-54mp · CVE-2025-65017 - CVSS 7.5 High
chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php.
- CWE-703
- CVSS 7.5 High
Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out
- grafana/grafana-enterprise
- grafana/grafana
- Denial of service
- CWE-703
- CVSS 4.0, no score published
CometBFT has inconsistencies between how commit signatures are verified and how block time is derived
- CWE-703
<0.37.18 || >=0.38.0-alpha.1, <0.38.21 · fixed in 0.37.18, 0.38.21
GHSA-c32p-wcqj-j677 - CVSS 6.5 Medium
EVerest's inadequate exception handling leads to denial of service
- everest-core
- CWE-703
- CVSS 2.7 Low
rsa crate has potential panic on a prime being equal to 1
- CWE-703
<0.9.10 · fixed in 0.9.10
GHSA-9c48-w39g-hm26 · CVE-2026-21895 - CVSS 6.6 Medium
iccDEV has Type Confusion during XML Curve Serialization
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-188
- CVSS 5.3 Medium
Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion
- Denial of service
- CWE-703
<7.0.11 · fixed in 7.0.11
GHSA-46j5-6fg5-4gv3 - CVSS 7.5 High
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
- CWE-703
>=3.0.0, <=6.10.1 · no fixed version yet
GHSA-rcmh-qjqh-p98v · CVE-2025-14874 - CVSS 9.8 CriticalCritical · CVSS 9+
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703