CWE-252 in Input Validation and Logic
- CVEs
- 182
- Exploited
- 0
- Public check
- 0
- Likely
- 3
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-125070FFmpeg through 9.0.2 NULL Pointer Dereference in EA TQI Decoder | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125068FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video Decoder | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125067FFmpeg through 9.0.2 VBLE Decoder NULL Pointer Dereference via vble_decode_frame() | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125066FFmpeg through 9.0.2 NULL Pointer Dereference in CLJR Video Decoder | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125065FFmpeg through 9.0.2 NULL Pointer Dereference via TGV Decoder eatgv.c | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-125064FFmpeg through 9.0.2 NULL Pointer Dereference in G.726 ADPCM Decoder | FFmpeg · FFmpeg | Unlikely | 5.5 | 0.2% | 2026-11-09 |
| CVE-2025-38602iwlwifi: Add missing check for alloc_ordered_workqueue | Linux · Linux | Unlikely | – | 0.2% | 2025-08-19 |
| CVE-2023-29243Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of… | Intel · Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA | Unlikely | 4.4 | 0.2% | 2023-08-11 |
| CVE-2026-62930Unchecked return value in the MigTD's TLS implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adver… | Intel(R) TDX Migration Trust Domain (MigTD) | Unlikely | 5.3 | 0.2% | 2026-11-10 |
| CVE-2026-125072FFmpeg through 9.0.2 NULL Pointer Dereference in MPEG Audio Decoder | FFmpeg · FFmpeg | Unlikely | 4.7 | 0.2% | 2026-11-09 |
| CVE-2026-125071FFmpeg through 9.0.2 NULL Pointer Dereference in JV Video Decoder | FFmpeg · FFmpeg | Unlikely | 4.7 | 0.2% | 2026-11-09 |
| CVE-2026-125069FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels Decoder | FFmpeg · FFmpeg | Unlikely | 4.7 | 0.2% | 2026-11-09 |
| CVE-2023-4162Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0 | Brocade · Fabric OS | Unlikely | 4.4 | 0.2% | 2023-08-31 |
| CVE-2026-86141xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. | xmlsoft · libxml2 | Unlikely | 2.9 | 0.2% | 2026-09-05 |
| CVE-2026-0421A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when co… | Lenovo · ThinkPad L13 Gen 6 BIOS | Unlikely | 6.5 | 0.2% | 2026-01-14 |
| CVE-2026-78699rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres | ash-project · ash_postgres | Unlikely | 7.2 | 0.2% | 2026-08-30 |
| CVE-2026-64040cachefiles: Fix error return when vfs_mkdir() fails | Linux · Linux | Unlikely | – | 0.2% | 2026-07-19 |
| CVE-2023-50359QTS, QuTS hero | QNAP Systems Inc. · QTS | Unlikely | 3.4 | 0.2% | 2024-02-02 |
| CVE-2022-46897An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it f… | Insyde · Kernel | Unlikely | 5.3 | 0.2% | 2024-04-22 |
| CVE-2022-31225Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the st… | Dell · CPG BIOS | Unlikely | 3.0 | 0.2% | 2022-09-12 |
| CVE-2026-71180Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit… | Dell · Update Package Framework | Unlikely | 8.2 | 0.1% | 2026-09-16 |
| CVE-2026-95316Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity:… | Google · Chrome | Unlikely | 2.9 | 0.1% | 2026-09-29 |
| CVE-2021-39643In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local… | Google · Android | Unlikely | – | 0.1% | 2021-12-15 |
| CVE-2026-98114ksmbd: propagate DACL parsing errors | Linux · Linux | Unlikely | – | 0.1% | 2026-09-25 |
| CVE-2026-62920Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adv… | Intel(R) TDX Migration Trust Domain (MigTD) | Unlikely | 6.7 | 0.1% | 2026-11-10 |
| CVE-2026-35344uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression | Uutils · coreutils | Unlikely | 3.3 | 0.1% | 2026-04-22 |
| CVE-2026-23301ASoC: SDCA: Add allocation failure check for Entity name | Linux · Linux | Unlikely | – | 0.1% | 2026-03-25 |
| CVE-2025-29938An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbi… | AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Re… | Unlikely | 7.1 | 0.1% | 2026-05-15 |
| CVE-2026-19809Kernel stack information disclosure in the charger_get_prop() system call handler | zephyrproject · zephyr | Unlikely | 3.3 | 0.1% | 2026-11-12 |
| CVE-2025-0028An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confid… | AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Re… | Unlikely | 8.3 | 0.1% | 2026-05-15 |
| CVE-2026-98141ntfs: propagate reparse index insertion failure | Linux · Linux | Unlikely | – | 0.1% | 2026-09-25 |
| CVE-2026-20793Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software… | Intel · Intel(R) QAT software drivers for Windows | Unlikely | 4.8 | 0.1% | 2026-05-12 |
Data as of 2026-11-15.