Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

xenOff-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2...CVE-2014-1895Fix available5.8 MediumApril 1, 2014
xenMultiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and...CVE-2014-18945.2 MediumApril 1, 2014
xenMultiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the...CVE-2014-18935.2 MediumApril 1, 2014
xenMultiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4)...CVE-2014-18915.2 MediumApril 1, 2014
icinga, opensuse +1 moreMultiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to...CVE-2014-23865.0 MediumMarch 25, 2014
xnviewInteger overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code...CVE-2013-39389.3 HighMarch 18, 2014
linuxfoundation cups-filters, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp...CVE-2013-6475Fix available6.8 MediumMarch 12, 2014
videolan vlc media playerThe ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in...CVE-2014-1684Public exploitFix available4.3 MediumMarch 3, 2014
ffmpegThe msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly...CVE-2014-20996.8 MediumMarch 2, 2014
libpngThe png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through...CVE-2014-0333Fix available5.0 MediumFebruary 27, 2014
apple mac os xInteger signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to...CVE-2014-12617.5 HighFebruary 27, 2014
apple quicktimeInteger signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute...CVE-2014-12459.3 HighFebruary 27, 2014
postgresqlMultiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x...CVE-2014-2669Fix available6.5 MediumFebruary 20, 2014
postgresqlMultiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8...CVE-2014-0064Fix available6.5 MediumFebruary 20, 2014
qemuInteger signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x...CVE-2013-4148Fix available7.5 HighFebruary 20, 2014
phpext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote...CVE-2014-20205.0 MediumFebruary 18, 2014
phpMultiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before...CVE-2013-73285.8 MediumFebruary 18, 2014
phpInteger overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows...CVE-2013-72266.8 MediumFebruary 18, 2014
codeaurora android-msmMultiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux...CVE-2013-47367.8 HighFebruary 10, 2014
pidginInteger signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote...CVE-2013-6489Fix available5.0 MediumFebruary 5, 2014
pidginMultiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to...CVE-2013-6477Fix available5.0 MediumFebruary 5, 2014
linux kernel, canonical ubuntu linux, opensuse evergreen +2 more +4 moreThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1...CVE-2014-3601Fix available4.3 MediumFebruary 5, 2014
light speed gaming mumble, mumblekit +1 moreThe needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre...CVE-2014-0045Fix available7.5 HighFebruary 5, 2014
openldap, debian linux +1 moreThe rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which...CVE-2013-4449Fix availableEPSS 10.9%4.3 MediumFebruary 5, 2014
csounds csoundInteger overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when...CVE-2012-2107Fix available9.3 HighFebruary 4, 2014
csounds csoundInteger overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting...CVE-2012-2106Fix available9.3 HighFebruary 4, 2014
pidginInteger overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin...CVE-2013-6487Fix available7.5 HighFebruary 3, 2014
live555 streaming media, videolan vlc media player +1 moreThe parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used...CVE-2013-6934EPSS 28.2%7.5 HighJanuary 23, 2014
live555 streaming mediaThe parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through...CVE-2013-6933Fix availableEPSS 17.4%7.5 HighJanuary 23, 2014
libreswanLibreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length...CVE-2013-45645.0 MediumJanuary 7, 2014
freerdpInteger overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP...CVE-2014-0791Fix available6.8 MediumJanuary 3, 2014
linux kernelThe recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux...CVE-2013-6376Fix available5.2 MediumDecember 14, 2013
ffmpegInteger signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2...CVE-2013-70146.8 MediumDecember 9, 2013
ffmpegThe g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect...CVE-2013-70136.8 MediumDecember 9, 2013
ffmpegMultiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote...CVE-2013-7010Fix available6.8 MediumDecember 9, 2013
ffmpegThe add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote...CVE-2013-08599.3 HighDecember 7, 2013
ffmpegInteger overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1...CVE-2013-08559.3 HighDecember 7, 2013
twibright linksInteger overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)...CVE-2013-6050Fix available4.3 MediumNovember 30, 2013
ffmpegThe gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an...CVE-2013-086410.0 HighNovember 23, 2013
ffmpegMultiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg...CVE-2013-08629.3 HighNovember 23, 2013
ffmpegMultiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec...CVE-2013-08769.3 HighNovember 23, 2013
ffmpegThe ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows...CVE-2013-08759.3 HighNovember 23, 2013
memcachedMultiple integer signedness errors in the (1) process_bin_sasl_auth, (2)...CVE-2011-4971Fix availableEPSS 22.3%5.0 MediumNovember 22, 2013
mozilla firefox, netscape portable runtime, seamonkey +2 moreInteger overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)...CVE-2013-5607Fix available7.5 HighNovember 20, 2013
gnu gnutls, opensuse +1 moreOff-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16...CVE-2013-44875.0 MediumNovember 19, 2013
linux kernel, canonical ubuntu linux +1 moreThe udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when...CVE-2013-4563Fix available7.1 HighNovember 19, 2013
mozilla network security servicesInteger overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...CVE-2013-1741Fix available7.5 HighNovember 16, 2013
google chrome, debian linux +1 moreInteger overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute...CVE-2013-66329.3 HighNovember 16, 2013
google chromeThe get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome...CVE-2013-6630Fix available5.0 MediumNovember 13, 2013
ffmpegThe wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote...CVE-2013-08539.3 HighNovember 9, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open