Advisories · Weakness
CWE-703.
Every Advisory and CVE whose sources give the weakness CWE-703, newest first.
- CVSS 9.1 CriticalCritical · CVSS 9+
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
- CWE-703
- CVSS 5.5 Medium
printer_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might allow attackers to cause a denial of service or have unspec…
- CWE-703
- CVSS 7.5 High
Improper Check or Handling of Exceptional Conditions in Aveva PI Server
- Aveva PI Server
- CWE-703
- CWE-754
- CVSS 6.5 Medium
Junos OS: jdhcpd will hang on receiving a specific DHCP packet
- Juniper Networks Junos OS
- CWE-703
- CVSS 5.9 Medium
Rust EVM erroneousle handles `record_external_operation` error return
- CWE-703
<0.41.1 · fixed in 0.41.1
GHSA-27wg-99g8-2v4v · CVE-2024-21629 - CVSS 7.5 High
FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
- signalwire freeswitch
- CWE-703
- CVSS 5.9 Medium
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
- Bosch BVMS
- Bosch BVMS Viewer
- CWE-703
- CVSS 7.5 High
An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
- Bosch Video Recording Manager
- Bosch Video Streaming Gateway
- CWE-703
- CVSS 7.5 High
Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation
- asterisk
- CWE-703
- CVSS 7.5 High
Calico Typha denial of service vulnerability
- Denial of service
- CWE-703
<=3.25.1 || >=3.26.0, <3.26.3 · fixed in 3.26.3
GHSA-5r5h-q934-cccp · CVE-2023-41378 - CVSS 7.5 High
Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
- CWE-703
- CWE-754
>=1.31.0, <1.33.0 · fixed in 1.33.0
GHSA-r344-xw3p-2frj · CVE-2023-45812 - CVSS 7.1 High
The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y.
- Zephyr
- CWE-703
- CVSS 6.5 Medium
Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN
- Juniper Networks Junos OS
- CWE-703
-
An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file.
- CWE-703
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 7.5 High
Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
- Juniper Networks Junos OS
- CWE-703
- CVSS 4.1 Medium
VTAdmin users that can create shards can deny access to other functions
- CWE-20
- CWE-703
<0.16.2 · fixed in 0.16.2
GHSA-pqj7-jx24-wj7w · CVE-2023-29195 - CVSS 6.5 Medium
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial…
- NVIDIA ConnectX Firmware
- CWE-703
- CVSS 6.5 Medium
Junos OS: JRR200: Kernel crash upon receipt of a specific packet
- Juniper Networks Junos OS
- CWE-703
- CVSS 6.5 Medium
Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service
- Juniper Networks Junos OS
- CWE-703
- CVSS 6.5 Medium
Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets
- Juniper Networks Junos OS
- CWE-703
- CVSS 6.5 Medium
PAN-OS: Local File Deletion Vulnerability
- Palo Alto Networks PAN-OS
- Palo Alto Networks Prisma Access
- CWE-703
- CVSS 4.1 Medium
vitess allows users to create keyspaces that can deny access to already existing keyspaces
- CWE-20
- CWE-703
<0.16.1 · fixed in 0.16.1
GHSA-735r-hv67-g38f · CVE-2023-29194 - CVSS 5.5 Medium
Android: In BitmapExport.java, there is a possible failure to truncate images due to a logic error…
- Android
- CWE-703
- CVSS 5.5 Medium
Android: In updateInputChannel of WindowManagerService.java…
- Android
- CWE-703
- CVSS 9.6 CriticalCritical · CVSS 9+
DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer
- zephyr
- CWE-703
- CVSS 9.6 CriticalCritical · CVSS 9+
DoS: Invalid Initialization in le_read_buffer_size_complete
- zephyr
- CWE-703
- CVSS 7.5 High
Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets
- Juniper Networks Junos OS
- CWE-703
- CVSS 4.3 Medium
Mozilla Firefox: If there was a PAC URL set and the server that hosts the PAC was not reachable…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-703
- CVSS 4.8 Medium
Samsung Mobile Samsung Pass: Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior…
- Samsung Mobile Samsung Pass
- CWE-703
- CVSS 5.3 Medium
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
- CWE-703
- CWE-755
<3.3.75 · fixed in 3.3.75
GHSA-x2jx-w3wm-9p3p · CVE-2022-41777 - CVSS 7.7 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-703
- CVSS 4.7 Medium
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because tha…
- CWE-703
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 7.5 High
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-703
- CVSS 6.4 Medium
Denial of service due to incorrect application of event authorization rules
- CWE-703
- CWE-755
<1.62.0rc1 · fixed in 1.62.0rc1
GHSA-jhjh-776m-4765 · CVE-2022-31152 - CVSS 5.3 Medium
Algorithm incorrectly returning error and Invalid unreduced value written to output buffer
- Western Digital Sweet B Library
- CWE-703
- CWE-707
- CVSS 5.3 Medium
Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero
- Western Digital Sweet B Library
- CWE-703
- CVSS 5.3 Medium
Point Compression/Decompression of NIST P-256 points with X coordinate of zero
- Western Digital Sweet B Library
- CWE-703
- CVSS 7.5 High
Denial of service in Open Policy Agent
- CWE-703
<0.42.0 · fixed in 0.42.0
GHSA-2m4x-4q9j-w97g · CVE-2022-33082 - CVSS 4.0 Medium
BT: Invalid channel map in CONNECT_IND results to Deadlock
- zephyr
- CWE-703
- CVSS 4.3 Medium
Samsung Mobile Samsung Internet: Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof…
- Samsung Mobile Samsung Internet
- CWE-703
- CVSS 4.3 Medium
Samsung Mobile Samsung Pass: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical…
- Samsung Mobile Samsung Pass
- CWE-703
- CVSS 3.7 Low
Unhandled case in node-lmdb
- CWE-241
- CWE-703
<0.9.7 · fixed in 0.9.7
GHSA-32j9-6qqm-mq9g · CVE-2022-21164 - CVSS 7.5 High
PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
- PTC Axeda agent
- PTC Axeda Desktop Server for Windows
- CWE-703
- CVSS 7.4 High
GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
- Palo Alto Networks GlobalProtect App
- CWE-703
- CVSS 6.5 Medium
Samsung Mobile Samsung Internet: Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows…
- Samsung Mobile Samsung Internet
- CWE-703
- CVSS 5.0 MediumCritical · KEVKEV
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
- Samsung Mobile Devices
- CWE-703
- CVSS 9.1 CriticalCritical · CVSS 9+
Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- CWE-703
- CVSS 2.0 Low
Samsung Mobile Samsung Pay: Improper check or handling of exception conditions vulnerability in Samsung Pay (US only)…
- Samsung Mobile Samsung Pay
- CWE-703
- CVSS 6.4 Medium
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.
- Samsung Mobile Devices
- CWE-703
- CVSS 4.5 Medium
Overriding the system configuration file causes a denial of service
- Crafter Software Crafter CMS
- CWE-703
- CVSS 7.5 High
Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart
- Juniper Networks Junos OS Evolved
- CWE-703
-
Samsung Mobile Samsung Health: Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to…
- Samsung Mobile Samsung Health
- CWE-703
-
Samsung Mobile Samsung Internet: Non-compliance of recommended secure coding scheme in Samsung Internet prior to version…
- Samsung Mobile Samsung Internet
- CWE-703
-
Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device.
- Samsung Mobile Devices
- CWE-703
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 7.4 High
Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart
- Juniper Networks Junos OS
- CWE-703
- CVSS 7.4 High
Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.
- Juniper Networks Junos OS
- CWE-703
- CVSS 5.8 Medium
Samsung Mobile Bixby: Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows…
- Samsung Mobile Bixby
- CWE-703