Skip to content

CWE-252 · weakness in Input Validation and Logic

Unchecked Return Value

182 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
3

Every one of the 182 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll…CVE-2005-436087% likely
  2. Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an…CVE-2007-3798CVSS 9.8 · 70% likely
  3. The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a deni…CVE-2010-021128% likely
  4. In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.CVE-2019-109024.7% likely
  5. QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).CVE-2018-202163.9% likely
  6. A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a…CVE-2018-14622libtirpc · CVSS 5.3 · 3.9% likely
  7. Apache Accumulo Improper Handling of Insufficient PermissionsCVE-2020-17533Apache Software Foundation · 3.7% likely

    Apache

  8. A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV r…CVE-2021-4189python · CVSS 5.3 · 3.6% likely
  9. In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condit…CVE-2018-143673.3% likely
  10. An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return valu…CVE-2020-6078Videolabs · CVSS 7.5 · 3.1% likely
  11. The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check th…CVE-2018-166433.1% likely
  12. Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.CVE-2022-238063.1% likely
  13. The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snpri…CVE-2019-121073.0% likely
  14. Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to ca…CVE-2002-1372CVSS 7.5 · 3.0% likely
  15. The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial…CVE-2016-100612.9% likely
  16. Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypas…CVE-2009-02652.5% likely
  17. adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits…CVE-2021-381712.4% likely
  18. manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attac…CVE-1999-01992.4% likely
  19. The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to ca…CVE-2016-100602.3% likely
  20. HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i…CVE-2019-171782.3% likely
  21. A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.CVE-2021-42780opensc · 2.2% likely
  22. In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.CVE-2021-288752.1% likely
  23. An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. In…CVE-2019-159002.1% likely
  24. FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffe…CVE-2019-159422.0% likely
  25. A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds wr…CVE-2020-6152Accusoft · CVSS 9.8 · 1.9% likely
  26. Unchecked return value from xmlTextReaderExpand in NokogiriCVE-2022-23476sparklemotion · CVSS 7.5 · 1.8% likely

    Sparklemotion

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in