CWE-253 Incorrect Check of Function Return Value
baseThe product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (80)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7474US | critical9.8 | — | ||
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restr… | ||||
| CVE-2023-52040US | critical9.8 | — | ||
An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function. | ||||
| CVE-2023-4501US | critical9.8 | — | ||
User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (includi… | ||||
| CVE-2023-49286US | high7.5 | — | ||
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack… | ||||
| CVE-2023-53536US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
blk-crypto: make blk_crypto_evict_key() more robust
If blk_crypto_evict_key() sees that the key is still in-us… | ||||
| CVE-2023-53338US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
lwt: Fix return values of BPF xmit ops
BPF encap ops can return different types of positive values, such like… | ||||
| CVE-2022-48801US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
If we fail to copy the just created fi… | ||||
| CVE-2026-59847US | high7.5 | — | ||
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to m… | ||||
| CVE-2024-1622US | high7.5 | — | ||
Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening. | ||||
| CVE-2023-24487US | high7.5 | — | ||
Arbitrary file read in Citrix ADC and Citrix Gateway | ||||
| CVE-2021-37625US | high7.5 | — | ||
Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-loop for a TCP socket/TLS socket/TCP+TLS… | ||||
| CVE-2022-49961US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
Precision markers need to be propagated whenever… | ||||
| CVE-2024-35785US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix kernel panic caused by incorrect error handling
The error path while failing to register devic… | ||||
| CVE-2026-0648US | medium6.3 | — | ||
The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the retur… | ||||
| CVE-2020-6107US | medium5.5 | — | ||
An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialize… | ||||
| CVE-2026-53292US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
syzbot reported a kernel BUG triggered fro… | ||||
| CVE-2026-53213US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: fix krealloc() memory leak
Don't just overwrite the original pointer passed to krealloc()
with its re… | ||||
| CVE-2026-53019US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()
Fix inverted condition that skips frequ… | ||||
| CVE-2026-43409US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
kprobes: avoid crash when rmmod/insmod after ftrace killed
After we hit ftrace is killed by some errors, the k… | ||||
| CVE-2026-43008US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
devm_regmap_init_mmio() returns an ERR_PTR()… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan