Weakness (CWE)

CWE-617: Reachable Assertion

Base Draft

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

How to prevent it (4 mitigations)

Implementation

If the assertion statement is required (e.g., for security or reliability), change the invoking code to avoid the conditions that trigger the assertion.
Implementation

Consider changing the assertion to some other less "fatal" error. This might not be easy to implement, since other code may be needed to handle the error.
Implementation

Make sensitive open/close operations non-reachable from directly user-controlled data (e.g. open/close resources)
Implementation

Perform input validation on user data.

Source: MITRE CWE-617

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.