Skip to content
OpenAdvisories

Weakness (CWE)

CWE-670: Always-Incorrect Control Flow Implementation

Class Draft

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

More detail

This weakness captures cases in which a particular code segment is always incorrect with respect to the algorithm that it is implementing. For example, if a C programmer intends to include multiple statements in a single block but does not include the enclosing braces (CWE-483), then the logic is always incorrect. This issue is in contrast to most weaknesses in which the code usually behaves correctly, except when it is externally manipulated in malicious ways.

Source: MITRE CWE-670

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-79608

    x86/AMD: ineffectual Zenbleed workaround

    The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice v…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2026-96760 Public exploit

    Authlib library contains a signature‑verification bypass vulnerability

    Authlib (v1.8.0 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and wit…

    authlib authlib open-webui python-authlib Debian Ubuntu Wolfi PyPI
  • Critical 9.1
    CVE-2026-16392

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Critical 9.1
    CVE-2026-55276

    Apache Tomcat: Logged effective web.xml is incomplete

    Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22,…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  • Critical —
    GHSA-54gx-3cgr-7mfm

    Cosmos EVM: incorrect state handling during nested EVM execution paths

    **Advisory ID:** ASA-2026-002 **Component:** ICS20 Precompile **Status:** Resolved **Published:** March 2026 **Contact:** [security@cosmoslabs.io](mailto:security@cosmoslabs.io) --- # Security Advisory ASA-2026-002 **Status: Resolved. A patch is available and…

    github.com/cosmos/evm Go
  • Critical 9.8
    CVE-2025-43359

    A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.1
    CVE-2025-29312

    An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch vi…

  • Critical 9.3
    CVE-2025-24800

    Critical vulnerability in `ismp-grandpa` <v15.0.1

    Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. Thi…

    polytope-labs hyperbridge ismp-grandpa grandpa-verifier crates.io
  • Critical 9.1
    CVE-2024-32971

    Defect in query plan cache may cause incorrect operations to be executed in Apollo Router

    Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Router contain a bug that in limited circumstances, could lead to unexpected operations being executed w…

    apollographql router apollo-router crates.io
  • Critical 9.8
    CVE-2022-25745

    Always Incorrect Control Flow Implementation in MODEM

    Memory corruption in modem due to improper input validation while handling the incoming CoAP message

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2020-1914

    Always-Incorrect Control Flow Implementation in Facebook Hermes

    A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript…

    Facebook Hermes hermes-engine npm
  • Critical 9.8
    CVE-2015-8857

    Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

    The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly r…

    uglifyjs uglifyjs uglify-js uglifier Debian Ubuntu npm RubyGems