Advisories · Weakness
CWE-703.
Every Advisory and CVE whose sources give the weakness CWE-703, newest first.
- CVSS 7.5 High
Incorrect boundary conditions in the JavaScript: WebAssembly component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703
- CVSS 9.8 CriticalCritical · CVSS 9+
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703
- CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect boundary conditions in the Graphics: WebGPU component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703
- CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect boundary conditions in the Graphics: WebGPU component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-703
- CVSS 6.5 Medium
Bluetooth: peripheral: Invalid handling of malformed connection request
- Zephyr
- CWE-703
- CVSS 5.3 Medium
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
- CWE-703
<1.7.0-beta.0 · fixed in 1.7.0-beta.0
GHSA-9m94-w2vq-hcf9 · CVE-2025-64435 - CVSS 5.3 Medium
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni
- Memory corruption
- CWE-703
<1.0.2 || >=1.1.0-beta.0, <1.1.5 · fixed in 1.0.2, 1.1.5
GHSA-4p3p-cr38-v5xp · CVE-2025-59836 - CVSS 4.3 Medium
Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
- CVSS 4.3 Medium
Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
- CVSS 4.3 Medium
Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
- CVSS 7.5 High
Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd
- CWE-703
>=1.2.0 · no fixed version yet
GHSA-f9gq-prrc-hrhc · CVE-2025-59531 - CVSS 3.5 Low
HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information
- HCL Software Unica Centralized Offer Management
- Information disclosure
- CWE-703
- CVSS 6.9 Medium
ywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input
- ywxbear PHP-Bookstore-Website-Example
- ywxbear PHP Basic BookStore Website
- CWE-703
- CWE-1284
- CVSS 5.5 Medium
Cross-site request forgery in Apple macOS
- Apple macOS
- Cross-site request forgery (CSRF)
- CWE-693
- CVSS 7.5 High
BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiId
- bigbluebutton
- CWE-703
- CVSS 7.5 High
BigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutation
- bigbluebutton
- CWE-703
- CVSS 7.5 High
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
- CWE-248
- CWE-703
>=2.9.0-rc1, <2.14.20 · fixed in 2.14.20
GHSA-gpx4-37g2-c8pv · CVE-2025-59538 - CVSS 5.1 Medium
TinyEnv: Missing .env file not required — may cause unexpected behavior
- CWE-703
<1.0.3 || >=1.0.9, <1.0.11 · fixed in 1.0.3, 1.0.11
GHSA-3j7m-5g4q-gfpc · CVE-2025-58758 - CVSS 3.3 Low
In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code.
- Google Android
- CWE-703
- CVSS 5.5 Medium
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code.
- Google Android
- CWE-703
- CVSS 4.0 Medium
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.
- Google Android
- CWE-703
- CVSS 6.5 Medium
A logic issue was addressed with improved checks.
- Apple Safari
- Apple macOS
- CWE-703
- CVSS 6.2 Medium
A logic issue was addressed with improved checks.
- Apple Safari
- Apple macOS
- CWE-703
- CVSS 7.1 High
HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service
- CWE-20
- CWE-248
<11.0.9 · fixed in 11.0.9
GHSA-pjj3-j5j6-qj27 · CVE-2025-54134 - CVSS 7.5 High
An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side.
- CWE-703
- CVSS 6.5 Medium
MongoDB Server may crash due to improper validation of explain command
- MongoDB Inc MongoDB Server
- CWE-703
- CVSS 4.0, no score published
ntpd NTS client denial of service via wrongly sized cookies
- Denial of service
- CWE-703
<1.5.0 · fixed in 1.5.0
GHSA-v83q-83hj-rw38 - CVSS 7.1 High
CometBFT allows a malicious peer to make node stuck in blocksync
- CWE-703
<0.38.17 || >=1.0.0-alpha.1, <1.0.1 · fixed in 0.38.17, 1.0.1
GHSA-22qq-3xwm-r5x4 · CVE-2025-24371 - CVSS 7.5 High
The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages.
- CWE-703
-
Lodestar snappy decompression issue
- CWE-703
<1.25.0 · fixed in 1.25.0
GHSA-53rv-hcvm-rpp9 - CVSS 2.3 Low
Vyper Does Not Check the Success of Certain Precompile Calls
- CWE-670
- CWE-703
* · no fixed version yet
GHSA-vgf2-gvx8-xwc3 · CVE-2025-21607 - CVSS 3.3 Low
notation-go has an OS error when setting CRL cache leads to denial of signature verification
- CWE-703
>=1.3.0-rc.1, <1.3.0-rc.2 · fixed in 1.3.0-rc.2
GHSA-qjh3-4j3h-vmwp · CVE-2024-51491 - CVSS 6.9 Medium
Denial of Service
- ORing IAP-420
- CWE-703
- CVSS 8.1 High
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation
- Spam protection, Honeypot, Anti-Spam by CleanTalk
- CWE-703
- CVSS 5.6 Medium
UltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check
- Tophive Ultimate AI
- CWE-703
- CVSS 2.1 Low
Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…
- Siemens SIMATIC Reader RF610R CMIIT
- Siemens SIMATIC Reader RF610R ETSI
- CWE-703
- CVSS 5.9 Medium
Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…
- Siemens SIMATIC Reader RF610R CMIIT
- Siemens SIMATIC Reader RF610R ETSI
- CWE-703
- CVSS 7.5 High
Improper check for unusual conditions in MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990…
- MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990, MT8678, MT8775, MT8792, MT8796
- CWE-703
- CWE-754
- CVSS 9.4 CriticalCritical · CVSS 9+
Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions
- Vonets VAR1200-H
- Vonets VAR1200-L
- CWE-703
- CVSS 6.6 Medium
Dell CloudLink: CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional…
- Dell CloudLink
- CWE-703
- CVSS 4.9 Medium
A vulnerability has been found in Dahua products.
- Dahua NVR4XXX
- CWE-703
- CVSS 6.5 Medium
Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
- Unitronics Vision PLC
- CWE-703
- CVSS 7.5 High
Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
- CWE-703
>=1.10.0, <1.15.12 || >=1.16.0-rc1, <1.16.3 || >=1.17.0-rc1, <1.17.2 · fixed in 1.15.12, 1.16.3, 1.17.2
GHSA-2qmw-pvf7-4mw6 · CVE-2024-6468 - CVSS 7.1 High
Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 8.3 High
node-twain vulnerable to Improper Check or Handling of Exceptional Conditions
- CWE-703
<=0.0.16 · no fixed version yet
GHSA-wxr3-2hgv-qm8f · CVE-2024-21525 - CVSS 5.3 Medium
IBM Security Verify Access denial of service
- IBM Security Verify Access
- CWE-703
- CVSS 8.7 High
Unauthenticated DoS
- Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera
- CWE-248
- CWE-703
- CVSS 5.5 Medium
CVE
- nvidia GPU display driver, vGPU software, and Cloud Gaming
- CWE-703
- CVSS 9.1 CriticalCritical · CVSS 9+
The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-703
- CVSS 4.9 Medium
Kubelet Incorrect Privilege Assignment in k8s.io/kubernetes
- CWE-703
>=1.13.0, <1.13.7 || >=1.14.0, <1.14.3 · fixed in 1.13.7, 1.14.3
GHSA-r76g-g87f-vw8f · CVE-2019-11245 - CVSS 8.1 High
AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass
- scottopolis AppPresser – Mobile App Framework
- CWE-703
- CVSS 3.8 Low
Improper check for unusual conditions in Intel(R) Power Gadget software for macOS
- Intel(R) Power Gadget software for macOS
- CWE-703
- CWE-754
- CVSS 5.0 Medium
Fortinet FortiOS: An improper check or handling of exceptional conditions vulnerability [CWE-703] in…
- Fortinet FortiOS
- CWE-703
- CVSS 7.5 High
Ivanti Connect Secure: An Improper Check for Unusual or Exceptional Conditions vulnerability in the web…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-703
- CVSS 7.1 High
Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash
- Juniper Networks Junos OS
- CWE-703
- CVSS 8.2 HighCritical · CVSS 7+ and EPSS
Ivanti Connect Secure: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-703
- CVSS 8.2 High
Ivanti Connect Secure: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-703
- CVSS 7.5 High
Ivanti Connect Secure: A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-703
- CVSS 5.3 Medium
Ivanti Connect Secure: An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-703
- CVSS 6.4 Medium
HashiCorpVault does not correctly validate OCSP responses
- CWE-636
- CWE-703
<1.16.0 · fixed in 1.16.0
GHSA-j2rp-gmqv-frhv · CVE-2024-2660