CWE-670 · Input Validation and Logic
Always-Incorrect Control Flow Implementation
148CVEs
SortMost likely exploited
148 CVEs with CWE-670 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-9425CheckrConfig <3.9.4 - Sensitive Information DisclosureRconfig · Rconfig · 2020-03-20 | – | 18% | 2020-03-20 |
| CVE-2019-9946Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, use…Cncf · Portmap · 2019-04-02 | – | 3.2% | 2019-04-02 |
| CVE-2019-17192The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which…Signal · Private Messenger · 2019-10-05 | – | 2.7% | 2019-10-05 |
| CVE-2022-31116Incorrect handling of invalid surrogate pair characters in ujsonultrajson · ultrajson · CVSS 7.5 · 2022-07-05 | 7.5 | 2.5% | 2022-07-05 |
| CVE-2020-1914A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially r…Facebook · Hermes · 2020-10-08 | – | 2.5% | 2020-10-08 |
| CVE-2020-36277Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.Leptonica · Leptonica · 2021-03-11 | – | 2.4% | 2021-03-11 |
| CVE-2019-20430In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent…Lustre · Lustre · 2020-01-27 | – | 2.2% | 2020-01-27 |
| CVE-2021-1236Multiple Cisco Products Snort Application Detection Engine Policy Bypass VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 4 · 2021-01-13 | 4.0 | 2.2% | 2021-01-13 |
| CVE-2019-11412An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.Artifex · Mujs · 2019-04-21 | – | 2.1% | 2019-04-21 |
| CVE-2018-19058An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before…Freedesktop · Poppler · 2018-11-07 | – | 1.9% | 2018-11-07 |
| CVE-2020-35477MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Sp…Mediawiki · Mediawiki · 2020-12-18 | – | 1.7% | 2020-12-18 |
| CVE-2020-3885A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.…Apple · iOS · 2020-04-01 | – | 1.6% | 2020-04-01 |
| CVE-2020-17466Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.Turcom · Trcwifizone · 2020-08-11 | – | 1.5% | 2020-08-11 |
| CVE-2022-31111Discrepency in transfer value and actual value due to incorrect truncation in Frontierparitytech · frontier · CVSS 5.3 · 2022-07-06 | 5.3 | 1.4% | 2022-07-06 |
| CVE-2021-43839Drainage of FeeCollector's Block Transaction Feescrypto-org-chain · cronos · CVSS 7.5 · 2021-12-21 | 7.5 | 1.4% | 2021-12-21 |
| CVE-2022-29255Multiple evaluation of contract address in call in vypervyperlang · vyper · CVSS 8.2 · 2022-06-06 | 8.2 | 1.3% | 2022-06-06 |
| CVE-2021-37605In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.Microchip · Miwi · 2021-08-05 | – | 1.3% | 2021-08-05 |
| CVE-2018-16766In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact beca…Webassembly Virtual Machine Project · Webassembly Virtual Machine · 2018-09-10 | – | 1.3% | 2018-09-10 |
| CVE-2021-37604In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the messag…Microchip · Miwi · 2021-08-05 | – | 1.2% | 2021-08-05 |
| CVE-2023-1668A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue resu…Cloudbase · openvswitch · CVSS 8.2 · 2023-04-10 | 8.2 | 1.2% | 2023-04-10 |
| CVE-2014-2686Ansible prior to 1.5.4 mishandles the evaluation of some strings.Redhat · Ansible · 2020-01-09 | – | 1.2% | 2020-01-09 |
| CVE-2022-21655Incorrect handling of internal redirects results in crash in Envoyenvoyproxy · envoy · CVSS 7.5 · 2022-02-22 | 7.5 | 1.1% | 2022-02-22 |
| CVE-2022-21679Authorization Policy bypass in Istioistio · istio · CVSS 6.8 · 2022-01-19 | 6.8 | 1.1% | 2022-01-19 |
| CVE-2020-5753Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to I…Signal · Signal Private Messenger · 2020-05-20 | – | 1.1% | 2020-05-20 |
| CVE-2019-19729An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an addition…Bson-Objectid Project · Bson-Objectid · 2019-12-11 | – | 1.1% | 2019-12-11 |
| CVE-2021-43979Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control. The data replication mechanism allows policies to a…Openpolicyagent · Gatekeeper · 2021-11-17 | – | 1.1% | 2021-11-17 |
| CVE-2021-41153Specification non-compliance in JUMPIrust-blockchain · evm · CVSS 8.7 · 2021-10-18 | 8.7 | 1.0% | 2021-10-18 |
| CVE-2019-19324Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.Xmidt · Cjwt · 2020-03-20 | – | 1.0% | 2020-03-20 |
| CVE-2024-38365btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionalitybtcsuite · btcd · CVSS 7.4 · 2024-10-11 | 7.4 | 1.0% | 2024-10-11 |
| CVE-2022-45196Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabr…Hyperledger · Fabric · CVSS 7.5 · 2022-11-12 | 7.5 | 1.0% | 2022-11-12 |
| CVE-2025-43359A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tah…Apple · iOS and iPadOS · CVSS 9.8 · 2025-09-15 | 9.8 | 1.0% | 2025-09-15 |
| CVE-2022-26890On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5,…F5 · BIG-IP Advanced WAF, ASM, and APM · CVSS 7.5 · 2022-05-05 | 7.5 | 1.0% | 2022-05-05 |
| CVE-2023-41376Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes.Nokia · Service Router Operating System · 2023-08-29 | – | 0.9% | 2023-08-29 |
| CVE-2024-33431An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file.Stsaz · Phiola · CVSS 6.5 · 2024-05-01 | 6.5 | 0.9% | 2024-05-01 |
| CVE-2023-30629Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success valuevyperlang · vyper · CVSS 7.5 · 2023-04-24 | 7.5 | 0.9% | 2023-04-24 |
| CVE-2022-35917Weakness in Transfer Validation Logic in @solana/paysolana-labs · solana-pay · CVSS 5.3 · 2022-08-01 | 5.3 | 0.9% | 2022-08-01 |
| CVE-2018-19212In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.Webmproject · Libwebm · 2018-11-12 | – | 0.9% | 2018-11-12 |
| CVE-2021-38019Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Google · Chrome · 2021-12-23 | – | 0.9% | 2021-12-23 |
| CVE-2024-52811Acks not validated before logged to qlog leads to buffer overflow in ngtcp2ngtcp2 · ngtcp2 · CVSS 8.2 · 2024-11-25 | 8.2 | 0.8% | 2024-11-25 |
| CVE-2021-0517In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networ…Google · Android · 2021-06-21 | – | 0.8% | 2021-06-21 |
| CVE-2020-26506An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative…Marmind · Marmind · 2020-11-05 | – | 0.8% | 2020-11-05 |
| CVE-2021-34767Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 7.4 · 2021-09-23 | 7.4 | 0.8% | 2021-09-23 |
| CVE-2023-39152Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circu…Jenkins Project · Jenkins Gradle Plugin · 2023-07-26 | – | 0.8% | 2023-07-26 |
| CVE-2023-41058Trigger `beforeFind` not invoked in internal query pipeline in parse-serverparse-community · parse-server · CVSS 7.5 · 2023-09-04 | 7.5 | 0.8% | 2023-09-04 |
| CVE-2024-32971Defect in query plan cache may cause incorrect operations to be executed in Apollo Routerapollographql · router · CVSS 9.1 · 2024-05-02 | 9.1 | 0.7% | 2024-05-02 |
| CVE-2025-49091KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. Th…KDE · Konsole · CVSS 8.2 · 2025-06-11 | 8.2 | 0.7% | 2025-06-11 |
| CVE-2021-32684Missing Handler in @scandipwa/magento-scriptsscandipwa · create-magento-app · CVSS 6.2 · 2021-06-14 | 6.2 | 0.7% | 2021-06-14 |
| CVE-2026-53404Apache Tomcat: Bad ornext processing in RewriteValveApache Software Foundation · Apache Tomcat · CVSS 7.3 · 2026-06-29 | 7.3 | 0.7% | 2026-06-29 |
| CVE-2025-58136Apache Traffic Server: A simple legitimate POST request causes a crashApache Software Foundation · Apache Traffic Server · CVSS 7.5 · 2026-04-02 | 7.5 | 0.7% | 2026-04-02 |
| CVE-2022-39354evm has incorrect is_static parameter for custom stateful precompilesrust-blockchain · evm · CVSS 5.9 · 2022-10-25 | 5.9 | 0.7% | 2022-10-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.