CWE-252 in Input Validation and Logic
- CVEs
- 182
- Exploited
- 0
- Public check
- 0
- Likely
- 3
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-47245MyBB: Buddy list corruption | mybb · mybb | Unlikely | 4.3 | 0.4% | 2026-08-18 |
| CVE-2019-9704Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not chec… | Cron Project · Cron | Unlikely | – | 0.4% | 2019-03-12 |
| CVE-2026-114408NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full | Eclipse Foundation · Eclipse ThreadX NetX Duo | Unlikely | 8.7 | 0.4% | 2026-11-02 |
| CVE-2026-86739Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence | grokability · snipe-it | Unlikely | 3.1 | 0.4% | 2026-09-09 |
| CVE-2017-0774A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62… | Google Inc. · Android | Unlikely | – | 0.4% | 2017-09-08 |
| CVE-2026-77641tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send failure… | torproject · Tor | Unlikely | 6.5 | 0.4% | 2026-08-20 |
| CVE-2025-54571ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure | owasp-modsecurity · ModSecurity | Unlikely | 6.9 | 0.4% | 2025-08-05 |
| CVE-2025-61935BIG-IP Advanced WAF and ASM vulnerability | F5 · BIG-IP | Unlikely | 7.5 | 0.3% | 2025-10-15 |
| CVE-2026-62909.NET Elevation of Privilege Vulnerability | Microsoft · .NET 10.0 runtime | Unlikely | 7.8 | 0.3% | 2026-08-11 |
| CVE-2026-79772Nokogiri before 1.19.1 Unchecked Return Value canonicalize | sparklemotion · nokogiri | Unlikely | 5.3 | 0.3% | 2026-08-25 |
| CVE-2026-86749snipe-it before 8.7.0 Data Loss via Failed Image Write | grokability · snipe-it | Unlikely | 6.3 | 0.3% | 2026-09-09 |
| CVE-2026-107838RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion | RIOT-OS · RIOT | Unlikely | 7.5 | 0.3% | 2026-10-09 |
| CVE-2025-62791Wazuh vulnerable to NULL pointer dereference in DecodeCiscat | wazuh · wazuh | Unlikely | 6.9 | 0.3% | 2025-10-29 |
| CVE-2023-41092Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of serv… | Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs | Unlikely | 7.6 | 0.3% | 2024-05-16 |
| CVE-2026-40060BIG-IP Advanced WAF and ASM vulnerability | F5 · BIG-IP | Unlikely | 7.5 | 0.3% | 2026-05-13 |
| CVE-2026-115403NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full | Eclipse Foundation · Eclipse ThreadX | Unlikely | 8.2 | 0.3% | 2026-11-02 |
| CVE-2024-42068bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() | Linux · Linux | Unlikely | 7.8 | 0.3% | 2024-07-29 |
| CVE-2023-3013Unchecked Return Value in gpac/gpac | gpac · gpac/gpac | Unlikely | 4.4 | 0.3% | 2023-05-31 |
| CVE-2024-42067bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() | Linux · Linux | Unlikely | 7.8 | 0.3% | 2024-07-29 |
| CVE-2021-0107Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Intel · Intel(R) Processors | Unlikely | 6.7 | 0.3% | 2022-02-09 |
| CVE-2024-12650Wago: Vulnerability in libwagosnmp | WAGO · CC100 0751-9x01 | Unlikely | 5.4 | 0.3% | 2025-03-05 |
| CVE-2024-45775Grub2: commands/extcmd: missing check for failed allocation | Redhat · grub2 | Unlikely | 5.2 | 0.3% | 2025-02-18 |
| CVE-2025-11839GNU Binutils prdbg.c tg_tag_type return value | GNU · Binutils | Unlikely | 3.3 | 0.3% | 2025-10-16 |
| CVE-2023-52797drivers: perf: Check find_first_bit() return value | Linux · Linux | Unlikely | – | 0.3% | 2024-05-21 |
| CVE-2026-31830sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest | sigstore · sigstore-ruby | Unlikely | 7.5 | 0.3% | 2026-03-10 |
| CVE-2025-1394Denial of Service (DoS) vulnerabilitiey in Zigbee library | silabs.com · Zigbee Stack | Unlikely | 5.9 | 0.3% | 2025-07-30 |
| CVE-2021-3659A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a l… | Linux · Kernel | Unlikely | – | 0.3% | 2022-08-22 |
| CVE-2021-0155Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. | Intel · Intel(R) Processors | Unlikely | 5.5 | 0.3% | 2022-05-12 |
| CVE-2023-23003In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value. | Linux · Linux Kernel | Unlikely | 4.0 | 0.3% | 2023-03-01 |
| CVE-2026-61857ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP | ImageMagick · ImageMagick | Unlikely | 3.7 | 0.3% | 2026-07-11 |
| CVE-2024-39558Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR | Juniper Networks · Junos OS | Unlikely | 6.5 | 0.3% | 2024-07-10 |
| CVE-2026-106436Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver | MongoDB · PHP Driver | Unlikely | 4.8 | 0.3% | 2026-10-08 |
| CVE-2021-47360binder: make sure fd closes complete | Linux · Linux | Unlikely | – | 0.3% | 2024-05-21 |
| CVE-2020-8934Site Kit by Google plugin for WordPress | Google · Site Kit By Google | Unlikely | 4.3 | 0.2% | 2023-07-07 |
| CVE-2023-26591Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via phy… | Intel · Intel(R) Thunderbolt(TM) DCH drivers for Windows | Unlikely | 2.0 | 0.2% | 2024-02-14 |
| CVE-2020-12372Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access. | Intel · Intel(R) Graphics Drivers | Unlikely | – | 0.2% | 2021-02-17 |
| CVE-2021-34405NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of ser… | NVIDIA · SHIELD TV | Unlikely | 5.5 | 0.2% | 2022-01-18 |
| CVE-2023-52680ALSA: scarlett2: Add missing error checks to *_ctl_get() | Linux · Linux | Unlikely | – | 0.2% | 2024-05-17 |
| CVE-2023-52692ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() | Linux · Linux | Unlikely | – | 0.2% | 2024-05-17 |
| CVE-2022-3108An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup(). | Linux · Kernel | Unlikely | 5.5 | 0.2% | 2022-12-14 |
| CVE-2023-47480An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. | – | Unlikely | 8.4 | 0.2% | 2024-09-20 |
| CVE-2025-22026nfsd: don't ignore the return code of svc_proc_register() | Linux · Linux | Unlikely | – | 0.2% | 2025-04-16 |
| CVE-2023-40067Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access. | Intel(R) CSME | Unlikely | 5.7 | 0.2% | 2024-08-14 |
| CVE-2023-53070ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent | Linux · Linux | Unlikely | – | 0.2% | 2025-05-02 |
| CVE-2026-21492iccDEV ToneMap Writer has NULL Pointer Member Call | InternationalColorConsortium · iccDEV | Unlikely | 5.5 | 0.2% | 2026-01-06 |
| CVE-2026-90648wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return… | WebAssembly · wabt | Unlikely | 7.1 | 0.2% | 2026-09-12 |
| CVE-2024-39492mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown | Linux · Linux | Unlikely | 7.0 | 0.2% | 2024-07-10 |
| CVE-2026-21497NULL Pointer Dereference in iccDEV Unknown Tag Parser | InternationalColorConsortium · iccDEV | Unlikely | 5.5 | 0.2% | 2026-01-07 |
| CVE-2026-125225FFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream Filter | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125174FFmpeg before 8.1.3 and 9.x before 9.0.2 NULL Pointer Dereference via ff_hap_set_chunk_count() | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
Data as of 2026-11-15.