← Back
CWE-252

183 CVEs • Abstraction: Base • Likelihood of Exploit: Low

Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

JSON object

Loading...

CVEs (183)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
6Apple
CanonicalDebian+3 more
7Debian Linux
FreebsdMac Os X+4 more
Apr 23, 2026
Jul 16, 2007
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
1Microsoft
1Internet Information Services
Apr 16, 2026
Dec 20, 2005
N/A· v4
N/A· v3
7.8 HIGH· v2
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" thro...Show more
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).Show less
2Apple
Debian
3Cups
Debian LinuxMac Os X
Apr 16, 2026
Dec 26, 2002
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaust...Show more
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.Show less