CWE-754.

posix-clock: Fix missing timespec64 check in pc_clock_settime()

• Linux kernel
• CWE-754

virtio_pmem: Check device status before requesting flush

• Linux kernel
• CWE-754

vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.c.

• CWE-754

vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.c.

• CWE-754

vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser.c.

• CWE-754

loona-hpack Panic Vulnerability

• CWE-754
• CWE-755

<0.4.3 · fixed in 0.4.3

Improper check for unusual conditions in Apple iOS and iPadOS

• Apple iOS and iPadOS
• CWE-754

An issue was discovered in libexpat before 2.6.4.

• CWE-754

IBM WebSphere Application Server denial of service

• IBM WebSphere Application Server
• CWE-754

Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Cortex XDR Agent: Local Windows User Can Disable the Agent

• Palo Alto Networks Cortex XDR Agent
• CWE-754

Improper check for unusual conditions in Intel(R) TDX Module firmware

• Intel(R) TDX Module firmware
• CWE-754

Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability

• Rockwell Automation Drives - PowerFlex 6000T
• CWE-754

Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump

• Webroot SecureAnywhere - Web Shield
• CWE-754

CODESYS: web server vulnerable to DoS

• CODESYS Control for BeagleBone SL
• CODESYS Control for emPC-A/iMX6 SL
• CWE-754

ClamAV Privilege Handling Escalation Vulnerability

• Cisco ClamAV
• CWE-754

Improper check for unusual conditions in MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990…

• MediaTek, Inc. MT6835, MT6878, MT6886, MT6897, MT6980, MT6985, MT6989, MT6990, MT8678, MT8775, MT8792, MT8796
• CWE-703
• CWE-754

Failure to update the tamper reset cause register when a tamper event occurs

• silabs.com SE Firmware
• CWE-754

User creation date manipulation in POST /api/v4/users

• Mattermost
• CWE-754

Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

• CWE-754

<0.15.1 · fixed in 0.15.1

Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling

• Rockwell Automation ControlLogix® 5580
• Rockwell Automation GuardLogix 5580
• CWE-754

Improper check for unusual conditions in Intel(R) Ethernet Network Controllers and Adapters E810 Series

• Intel(R) Ethernet Network Controllers and Adapters E810 Series
• CWE-754

Jenkins Remoting library arbitrary file read vulnerability

• Path traversal
• CWE-754

<2.452.4 || >=2.460, <2.462.1 || >=2.470, <2.471 · fixed in 2.452.4, 2.462.1, 2.471

Mattermost allows a remote actor to permanently delete local data by abusing dangerous error handling in github.com/mattermost/mattermost-server

• CWE-754

>=9.5.0+incompatible, <9.5.7+incompatible || >=9.7.0+incompatible, <9.7.6+incompatible || >=9.8.0+incompatible, <9.8.2+incompatible || >=9.9.0+incompatible, <9.9.1+incompatible · fixed in 9.5.7+incompatible, 9.7.6+incompatible, 9.8.2+incompatible, 9.9.1+incompatible

XMP Toolkit's `XmpFile::close` can trigger undefined behavior

• CWE-754

<1.9.0 · fixed in 1.9.0

Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash

• Juniper Networks Junos OS
• CWE-754

Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes

• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash

• Juniper Networks Junos OS
• CWE-754

Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario

• Juniper Networks Junos OS Evolved
• CWE-754

Suricata defrag: IP ID reuse can lead to policy bypass

• OISF suricata
• CWE-754

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

• Juniper Networks Junos OS
• CWE-754

Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled

• Juniper Networks Junos OS Evolved
• CWE-754

Improper check for unusual conditions in Siemens SINEMA Remote Connect Server

• Siemens SINEMA Remote Connect Server
• CWE-754

Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx

• CWE-754

<5.5.2 · fixed in 5.5.2

Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash

• Juniper Networks Junos OS
• CWE-754

socket.io has an unhandled 'error' event

• CWE-20
• CWE-754

<2.5.1 || >=3.0.0, <4.6.2 · fixed in 2.5.1, 4.6.2

LNbits improperly handles potential network and payment failures when using Eclair backend

• CWE-754

<0.12.6 · fixed in 0.12.6

irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.

• CWE-754

Uncontrolled Resource Consumption in GitLab

• GitLab
• CWE-754

Mattermost crashes web clients via a malformed custom status in github.com/mattermost/mattermost-server

• CWE-754

>=8.1.0+incompatible, <8.1.12+incompatible || >=9.4.0+incompatible, <9.4.5+incompatible || >=9.5.0+incompatible, <9.5.3+incompatible || >=9.6.0-rc1+incompatible, <9.6.1+incompatible · fixed in 8.1.12+incompatible, 9.4.5+incompatible, 9.5.3+incompatible, 9.6.1+incompatible

Directus is soft-locked by providing a string value to random string util

• CWE-754

<10.11.2 · fixed in 10.11.2

Improper check for unusual conditions in Huawei CurieM-WFG9B

• Huawei CurieM-WFG9B
• CWE-754

Improper check for unusual conditions in Intel(R) Power Gadget software for macOS

• Intel(R) Power Gadget software for macOS
• CWE-703
• CWE-754

Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX

• CWE-754

<1.37.1 · fixed in 1.37.1

Suricata's defrag contains various issues leading to policy bypass

• OISF suricata
• CWE-754

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

• CWE-754

<4.2.67 · fixed in 4.2.67

Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process

• Juniper Networks Junos OS
• CWE-754

Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Improper check for unusual conditions in Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000

• Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000
• CWE-754

glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute().

• CWE-754

Improper check for unusual conditions in MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789…

• MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6983, MT6985, MT6989, MT8168, MT8188, MT8195, MT8673, MT8675
• CWE-754

Improper check for unusual conditions in Mozilla Firefox

• Mozilla Firefox
• CWE-754

XSS sidekiq-unique-jobs UI server vulnerability

• Cross-site scripting (XSS)
• Denial of service

>=6.0.0.rc7, <7.1.33 || >=8.0.0, <8.0.7 · fixed in 7.1.33, 8.0.7

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

• CWE-754