Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

CVEs (928)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-1955 1Qualcomm 178Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+175 more Jun 17, 2026 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...Show more Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-1953 1Qualcomm 205Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+202 more Jun 17, 2026 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics...Show more Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1938 1Qualcomm 207Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+204 more Jun 17, 2026 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,...Show more Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1887 1Qualcomm 39Ar7420 Firmware Ar9380 FirmwareCsr8811 Firmware+36 more Jun 17, 2026 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
CVE-2020-20225 1Mikrotik 1Routeros Jun 17, 2026 Jul 7, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a...Show more Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.Show less
CVE-2020-20211 1Mikrotik 1Routeros Sep 16, 2026 Jul 7, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a...Show more Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.Show less
CVE-2020-23322 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE \|\| context_p->token.type == LEXER_ASSIGN \|\| context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer in JerryScript 2.2.0.
CVE-2020-23320 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.
CVE-2020-23319 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE \|\| (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerrySc...Show more There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE \|\| (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerryScript 2.2.0.Show less
CVE-2020-23314 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.
CVE-2020-23313 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0
CVE-2020-23312 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.
CVE-2020-23311 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE \|\| context_p->token.type == LEXER_ASSIGN \|\| context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in Je...Show more There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE \|\| context_p->token.type == LEXER_ASSIGN \|\| context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.Show less
CVE-2020-23310 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.
CVE-2020-23309 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.
CVE-2020-23308 1Jerryscript 1Jerryscript Jun 17, 2026 Jun 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.
CVE-2021-1937 1Qualcomm 186Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+183 more Jun 17, 2026 Jun 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Co...Show more Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-36382 1Openvpn 1Openvpn Access Server Jun 17, 2026 Jun 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a d...Show more OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.Show less
CVE-2020-25710 4Debian FedoraprojectOpenldap+1 more 7Debian Linux Enterprise LinuxFedora+4 more Oct 14, 2026 May 28, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulner...Show more A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.Show less
CVE-2021-30501 3Fedoraproject RedhatUpx 3Enterprise Linux FedoraUpx Jun 17, 2026 May 27, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.

Previous 1...363738...47 Next