CWE-754.

Improper check for unusual conditions in ELECOM CO.,LTD. WAB-BE187-M and others

• ELECOM CO.,LTD. WAB-BE187-M
• ELECOM CO.,LTD. WAB-BE72-M
• CWE-754

Improper check for unusual conditions in Intel(R) NPU Drivers

• Intel(R) NPU Drivers
• CWE-754

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

• CWE-704
• CWE-754

<1.4.3 · fixed in 1.4.3

free5GC's NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference

• Memory corruption
• CWE-754

<1.2.3 · fixed in 1.2.3

free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

• Memory corruption
• CWE-754

<1.4.3 · fixed in 1.4.3

free5GC's PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference

• Memory corruption
• CWE-754

<1.4.2 · fixed in 1.4.2

Incorrect boundary conditions in the Audio/Video: Playback component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

net: consume xmit errors of GSO frames

• Linux kernel
• CWE-754

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

• Linux kernel
• CWE-628
• CWE-754

net-imap vulnerable to STARTTLS stripping via invalid response timing

• CWE-325
• CWE-392

<0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.3.10, 0.4.24, 0.5.14, 0.6.4

Clerk has an authorization bypass when combining organization, billing, or reverification checks

• Broken access control
• CWE-754

>=2.0.0, <2.17.11 || >=3.0.0, <3.0.18 · fixed in 2.17.11, 3.0.18

Admidio Missing Minimum Administrator Check in Role Membership Removal

• CWE-754

<5.0.9 · fixed in 5.0.9

btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()

• Linux kernel
• CWE-754

rxrpc: reject undecryptable rxkad response tickets

• Linux kernel
• CWE-754

Improper timeout handling in CODESYS EtherNetIP

• CODESYS EtherNetIP
• CWE-754

nimiq-blockchain: Peer-triggerable panic during history sync

• Denial of service
• CWE-20

<=0.2.0 · no fixed version yet

Duplicate Advisory: uutils coreutils has an Improper Check for Unusual or Exceptional Conditions

• CWE-754

<0.6.0 · fixed in 0.6.0

free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation

• CWE-754

<=1.4.2 · no fixed version yet

Incorrect boundary conditions in the Libraries component in NSS

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Libraries component in NSS

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Improper check for unusual conditions in Dell PowerScale OneFS

• Dell PowerScale OneFS
• CWE-754

free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors

• CWE-636
• CWE-754

<=1.4.2 · no fixed version yet

Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes

• Juniper Networks Junos OS
• CWE-754

Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed

• Juniper Networks Junos OS
• CWE-754

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes

• Juniper Networks Junos OS
• CWE-754

bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts

• CWE-754

>=0.1.0, <0.8.2 · fixed in 0.8.2

Cosign's verify-blob-attestation reports false positive when payload parsing fails

• CWE-754

<2.6.3 || >=3.0.0, <3.0.6 · fixed in 2.6.3, 3.0.6

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

• OpenSSL
• CWE-754

OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)

• CWE-636
• CWE-754

<2026.3.31 · fixed in 2026.3.31

pf silently ignores certain rules

• FreeBSD
• CWE-480
• CWE-754

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

• CWE-248
• CWE-754

>=4.0.0, <4.7.9 · fixed in 4.7.9

Missing timestamp validation in Zoom webhook handler

• Mattermost
• CWE-754

Mattermost: Authenticated DoS through failure to prevent rendering of external SVGs on link embeds

• CWE-754

>=8.0.0-20260105080200-d27a2195068d, <8.0.0-20260217110922-b7d4a1f1f59b || >=10.11.0-rc1, <10.11.2 || >=11.2.0-rc1, <11.2.4 || >=11.3.0-rc1, <11.3.2 || >=11.4.0-rc1, <11.4.1 · fixed in 8.0.0-20260217110922-b7d4a1f1f59b, 10.11.2, 11.2.4, 11.3.2, 11.4.1

@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling

• CWE-754

<0.70.6 · fixed in 0.70.6

Incorrect boundary conditions in the Audio/Video component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Audio/Video: GMP component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Graphics: Canvas2D component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Graphics: Canvas2D component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

Incorrect boundary conditions in the Layout: Text and Fonts component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

Incorrect boundary conditions in the Audio/Video: Web Codecs component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

Incorrect boundary conditions in the Audio/Video: Web Codecs component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

Incorrect boundary conditions, integer overflow in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

Incorrect boundary conditions in the Audio/Video: Playback component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754
• CWE-823

Incorrect boundary conditions in the Graphics: Canvas2D component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

Incorrect boundary conditions in the Graphics: Canvas2D component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-754

socket.io allows an unbounded number of binary attachments

• CWE-20
• CWE-754

<3.3.5 || >=3.4.0, <3.4.4 || >=4.0.0, <4.2.6 · fixed in 3.3.5, 3.4.4, 4.2.6

Cortex XDR Agent: Local Administrator can disable the agent on macOS

• Palo Alto Networks Cortex XDR Agent
• CWE-754

Zoom Workplace Clients for Windows - Improper Check

• Zoom Communications Inc. Zoom Workplace
• CWE-754

RustSec Advisory

• Code injection
• Privilege escalation

>=0.1.20, <0.2.9 · fixed in 0.2.9

Improper check for unusual conditions in Dell Device Management Agent (DDMA)

• Dell Device Management Agent (DDMA)
• CWE-754

Incorrect boundary conditions in the JavaScript: WebAssembly component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-754

free5GC has Improper Error Handling in UDM, Leading to Information Exposure

• free5gc udm
• CWE-20
• CWE-754

PAN-OS: Denial of Service in Advanced DNS Security Feature

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• CWE-754

Improper check for unusual conditions in Intel(R) NPU Drivers

• Intel(R) NPU Drivers
• CWE-754

Improper check for unusual conditions in Intel(R) NPU Drivers

• Intel(R) NPU Drivers
• CWE-754

Improper check for unusual conditions in Intel(R) Graphics Drivers and Intel LTS kernels

• Intel(R) Graphics Drivers and Intel LTS kernels
• CWE-754