Skip to content
OpenAdvisories

Weakness (CWE)

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Class Incomplete

The product uses an API function, data structure, or other entity in a way that relies on properties that are not always guaranteed to hold for that entity.

Source: MITRE CWE-758

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-31436

    dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-4705

    Undefined behavior in the WebRTC: Signaling component

    Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Critical 9.1
    CVE-2026-4724

    Undefined behavior in the Audio/Video component

    Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Critical —
    GHSA-5w5r-mf82-595p

    Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema

    The safe API functions `constant::Reader::get` and `StructSchema::new` rely on `PointerReader::get_root_unchecked`, which can cause undefined behavior (UB) by constructing arbitrary words or schemas. ## `Reader::get` ```rust pub fn get(&self) -> Result<<T as …

    capnp crates.io