Skip to content
OpenAdvisories

Weakness (CWE)

CWE-561: Dead Code

Base Draft

The product contains dead code, which can never be executed.

How to prevent it (1 mitigation)

  1. Implementation

    Remove dead code before deploying the application.

Source: MITRE CWE-561

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Low 3.1
    CVE-2026-44057

    Dead bounds check in Spotlight RPC unmarshaller

    A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted S…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.3
    CVE-2025-34205

    Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/r…

    Vasion Print Virtual Appliance Host Print Application
  • High 7.0
    CVE-2024-8300

    Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite

    Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suit…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions GENESIS64 ICONICS Suite ICS / OT
  • Medium 6.1
    CVE-2024-32634

    Logically dead code

    In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

    ASR Falcon
  • Low 3.3
    CVE-2022-33726

    Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activi…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.0
    CVE-2022-33685

    Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbi…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.0
    CVE-2022-30748

    Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.

    Samsung Mobile Samsung Members
  • Unscored —
    CVE-2021-25398

    Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.

    Samsung Mobile Bixby Voice
  • Medium 6.5
    CVE-2018-0039

    Contrail Service Orchestration: Hardcoded credentials for Grafana service

    Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other w…

    Juniper Networks Contrail Service Orchestration Network devices