CWE-617— Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.— MITRE CWE catalog
965 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-617page 4 of 20
- CVE-2025-46354HIGHCVSS 7.5EG 7.52025-07-22
A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious pack…
- CVE-2025-36512HIGHCVSS 7.5EG 7.52025-07-22
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to…
- CVE-2025-40777HIGHCVSS 7.5EG 7.52025-07-16
If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other than `disabled`), and if the resolver, in the process of resolving a query, enco…
- CVE-2025-49630HIGHCVSS 7.5EG 7.52025-07-10
In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2. Configurations affected are a reverse…
- CVE-2025-20666HIGHCVSS 7.5EG 7.52025-05-05
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.…
- CVE-2025-29339HIGHCVSS 7.5EG 7.52025-04-22
An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid…
- CVE-2024-56921HIGHCVSS 7.5EG 7.52025-02-03
An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmm_state_exception() function upon receipt of the Nausf_UEAuthentication_Authentica…
- CVE-2024-57519HIGHCVSS 7.5EG 7.52025-01-28
An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file.
- CVE-2024-24430HIGHCVSS 7.5EG 7.52025-01-22
A reachable assertion in the mme_ue_find_by_imsi function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
- CVE-2024-24428HIGHCVSS 7.5EG 7.52025-01-21
A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.
- CVE-2024-24427HIGHCVSS 7.5EG 7.52025-01-21
A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
- CVE-2024-24424HIGHCVSS 7.5EG 7.52025-01-21
A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
- CVE-2024-24420HIGHCVSS 7.5EG 7.52025-01-21
A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
- CVE-2023-37029HIGHCVSS 7.5EG 7.52025-01-21
Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MM…
- CVE-2023-37024HIGHCVSS 7.5EG 7.52025-01-21
A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a …
- CVE-2024-8361HIGHCVSS 7.5EG 7.52025-01-07
In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS). If a watchdog is implemented, device …
- CVE-2024-53856HIGHCVSS 7.5EG 7.52024-12-05
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.
- CVE-2024-53429HIGHCVSS 7.5EG 7.52024-11-21
Open62541 v1.4.6 is has an assertion failure in fuzz_binary_decode, which leads to a crash.
- CVE-2024-23385HIGHCVSS 7.5EG 7.52024-11-04
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
- CVE-2024-10455HIGHCVSS 7.5EG 7.52024-10-28
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block
- CVE-2024-47522HIGHCVSS 7.5EG 7.52024-10-16
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid ALPN in TLS/QUIC traffic when JA4 matching/logging is enabled can lead to Suricata aborti…
- CVE-2024-45795HIGHCVSS 7.5EG 7.52024-10-16
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assert…
- CVE-2024-45396HIGHCVSS 7.5EG 7.52024-10-11
Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vuln…
- CVE-2024-20094HIGHCVSS 7.5EG 7.52024-10-07
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; …
- CVE-2024-8768HIGHCVSS 7.5EG 7.52024-09-17
A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
- CVE-2024-39949HIGHCVSS 7.5EG 7.52024-07-31
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- CVE-2024-4076HIGHCVSS 7.5EG 7.52024-07-23
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 th…
- CVE-2023-43529HIGHCVSS 7.5EG 7.52024-05-06
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
- CVE-2024-34475HIGHCVSS 7.5EG 7.52024-05-05
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.
- CVE-2024-31744HIGHCVSS 7.5EG 7.52024-04-19
In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file.
- CVE-2024-32475HIGHCVSS 7.5EG 7.52024-04-18
Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enabled, a request containing a `host`/`:authority` header longer than 255 characters triggers an abnormal termination of Env…
- CVE-2023-33096HIGHCVSS 7.5EG 7.52024-03-04
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
- CVE-2023-33095HIGHCVSS 7.5EG 7.52024-03-04
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
- CVE-2023-5679HIGHCVSS 7.5EG 7.52024-02-13
A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 t…
- CVE-2023-5517HIGHCVSS 7.5EG 7.52024-02-13
A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally res…
- CVE-2023-43523HIGHCVSS 7.5EG 7.52024-02-06
Transient DOS while processing 11AZ RTT management action frame received through OTA.
- CVE-2023-34194HIGHCVSS 7.5EG 7.52023-12-13
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.
- CVE-2023-33044HIGHCVSS 7.5EG 7.52023-12-05
Transient DOS in Data modem while handling TLB control messages from the Network.
- CVE-2023-33043HIGHCVSS 7.5EG 7.52023-12-05
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
- CVE-2023-33041HIGHCVSS 7.5EG 7.52023-12-05
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
- CVE-2023-49286HIGHCVSS 7.5EG 7.52023-12-04
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed b…
- CVE-2023-40462HIGHCVSS 7.5EG 7.52023-12-04
The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router func…
- CVE-2023-32846HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-32845HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-32844HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-32843HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-32842HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-32841HIGHCVSS 7.5EG 7.52023-12-04
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…
- CVE-2023-44175HIGHCVSS 7.5EG 7.52023-10-12
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (Do…
- CVE-2023-24843HIGHCVSS 7.5EG 7.52023-10-03
Transient DOS in Modem while triggering a camping on an 5G cell.
Map vulnerabilities like CWE-617 to your infrastructure
EchelonGraph correlates every CVE — across CWE-617 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →