CWE-369 vulnerabilities

FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the FlashMQ broker when both set_retained_message_defer_timeout and set_retained_message_defer_timeout_spread are configured to non-default values, resulting in denial of service. If anonymous retained publishing is allowed, no authentication is required; otherwise, the attacker needs the corresponding publish permission. This issue has been patched in version 1.26.1.

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing a division by zero. An unauthenticated attacker can exploit this by sending a crafted slice packet to crash the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

CVE-2026-5747 is an out-of-bounds write vulnerability in the virtio PCI transport component of AWS Firecracker versions 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 architectures. A local guest user with root privileges could exploit this flaw to crash the Firecracker VMM process or potentially execute arbitrary code on the host. Exploitation to achieve code execution requires additional conditions such as a custom guest kernel or specific snapshot configurations. AWS has released fixed versions 1.14.4 and 1.15.1 and later to address this issue.

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6.

CVE-2026-1653 is a medium severity divide-by-zero vulnerability in the Lenovo Smart Connect Virtual Bus driver. It allows a local authenticated user to trigger a Windows blue screen (system crash) by causing a divide-by-zero error. Exploitation requires local access with limited privileges but no user interaction. The vulnerability impacts system availability by causing a denial-of-service condition. No known exploits are currently reported in the wild, and no patches have been published yet. The affected product is Lenovo Smart Connect, which integrates with Lenovo systems to enhance connectivity features. Organizations using Lenovo devices with Smart Connect enabled are at risk of local disruption. Mitigation involves restricting local user privileges and monitoring for abnormal system crashes until a vendor patch is released. Countries with significant Lenovo market presence and enterprise use are most likely affected. Overall, this vulnerability poses a medium risk primarily due to its local attack vector and denial-of-service impact.

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects .

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to division by zero in the TIFF Image Reader. This issue has been patched in version 2.3.1.2.

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service.

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6.

A divide-by-zero vulnerability exists in ImageMagick versions prior to 6.9.13-28 and 7.1.2-2. When a geometry string containing only a colon (":") is passed to the montage command with the -geometry option, it causes width and height to be set to zero. This leads to a division by zero in the ThumbnailImage() function, resulting in a crash and denial of service. The issue has been fixed in versions 6.9.13-28 and 7.1.2-2.

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header and passed to Extension::try_from and flows into parse_ttl_extension where it is parsed as a TTL value. If an attacker supplies a TTL of zero (e.g.by using a username such as 'configuredUser-ttl-0'), the modulo operation 'timestamp % ttl' will cause a division by zero panic, causing the server to crash causing a denial-of-service. This is fixed in version 2.4.0.

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

Wireshark versions 2.0.0 through 4.0.7 contain a divide-by-zero vulnerability due to improper validation of the length field in CP2179 packets. This flaw can be triggered by an attacker crafting a malicious packet, leading to a denial of service condition in the affected software.