Skip to content
OpenAdvisories

Weakness (CWE)

CWE-670: Always-Incorrect Control Flow Implementation

Class Draft

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

More detail

This weakness captures cases in which a particular code segment is always incorrect with respect to the algorithm that it is implementing. For example, if a C programmer intends to include multiple statements in a single block but does not include the enclosing braces (CWE-483), then the logic is always incorrect. This issue is in contrast to most weaknesses in which the code usually behaves correctly, except when it is externally manipulated in malicious ways.

Source: MITRE CWE-670

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2026-109722 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 7.5
    CVE-2026-38361 Public exploit

    Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-…

    dash-uploader PyPI
  • High 8.2
    CVE-2025-49091 Public exploit

    KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme…

    KDE Konsole konsole konsole Debian Ubuntu
  • High 7.3
    CVE-2023-20921 Public exploit

    In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility se…

    Android
  • High 7.4
    CVE-2021-34767 Public exploit

    Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

    A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a den…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.1
    CVE-2020-28052 Public exploit

    Logic error in Legion of the Bouncy Castle BC Java

    An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

    bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on org.bouncycastle:bcprov-jdk15 Debian Maven