Common Weakness Enumeration
CWE-475 Undefined Behavior for Input to API
Description
The behavior of this function is undefined unless its control parameter is set to a specific value.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-475 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-c4c3-7fpv-j4q5 | CVE-2026-75595 | CRITICAL |
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext |
2026-09-08 | |
| GHSA-pq5v-rwp8-p7gm | - | LOW | - |
rtvm-interpreter lacks sufficient checks in public API |
2025-12-02 |
| GHSA-gv26-qw3h-8qvp | CVE-2024-7046 | MODERATE |
Open WebUI Allows Viewing of Admin Details |
2025-03-21 | |
| GHSA-7xmc-vhjp-qv5q | CVE-2024-10569 | HIGH |
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb |
2025-03-20 | |
| GHSA-8f8q-q2j7-7j2m | CVE-2024-3099 | MODERATE |
Undefined Behavior in mlflow |
2024-10-11 | |
| GHSA-hqxw-f8mx-cpmw | CVE-2023-2253 | HIGH |
distribution catalog API endpoint can lead to OOM via malicious user input |
2023-05-11 | |
| GHSA-5wpj-c6f7-24x8 | CVE-2022-29207 | MODERATE |
Undefined behavior when users supply invalid resource handles |
2022-05-24 |