Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

apple xcodeInteger overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent...CVE-2015-11497.5 HighApril 10, 2015
x.org libx11, x11, canonical ubuntu linux +1 more +3 moreMultiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint...CVE-2013-7439Fix available7.5 HighApril 9, 2015
nih libzip, php, debian linux +2 more +4 moreInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...CVE-2015-2331Fix availableEPSS 27.4%7.5 HighMarch 20, 2015
tcpdumpInteger signedness error in the mobility_opt_print function in the IPv6 mobility printer in...CVE-2015-0261Fix available7.5 HighMarch 17, 2015
digia qt, fedoraproject fedora, opensuse +2 moreThe BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract...CVE-2015-0295Fix available5.0 MediumMarch 12, 2015
apple mac os xOff-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute...CVE-2015-106610.0 HighMarch 12, 2015
pngcrush project pngcrushOff-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84...CVE-2015-2158Fix available7.8 HighMarch 10, 2015
wireshark, opensuse +1 moreInteger overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd...CVE-2015-2192Fix available5.0 MediumMarch 8, 2015
google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in...CVE-2015-1219Fix available7.5 HighMarch 8, 2015
winace unaceInteger overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a...CVE-2015-2063Fix available4.3 MediumMarch 2, 2015
google androidMultiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native...CVE-2015-1474Public exploit10.0 HighFebruary 16, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 MediumFebruary 8, 2015
freebsdInteger signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10...CVE-2014-0998Public exploit7.2 HighFebruary 2, 2015
libmspack project libmspackInteger overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to...CVE-2014-9556Fix available5.0 MediumJanuary 30, 2015
apple mac os xInteger signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X...CVE-2014-449710.0 HighJanuary 30, 2015
apple iphone os, mac os x, tvos +2 moreInteger overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple...CVE-2014-4481Public exploit6.8 MediumJanuary 30, 2015
google chromeMultiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome...CVE-2015-1359Fix available6.8 MediumJanuary 27, 2015
jasper project jasper, debian linux, opensuse +1 more +3 moreOff-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8157Fix availableEPSS 16.9%7.5 HighJanuary 22, 2015
google chromeThe SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as...CVE-2014-7927Fix available7.5 HighJanuary 22, 2015
libtiffInteger overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a...CVE-2014-9330Fix available5.0 MediumJanuary 20, 2015
ffmpeglibavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions...CVE-2014-9602Fix available7.5 HighJanuary 16, 2015
ffmpeg, canonical ubuntu linux +1 morelibavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height,...CVE-2014-9604Fix available7.5 HighJanuary 16, 2015
divx directshowdemuxfilter, player, web player +2 moreMultiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx...CVE-2014-100247.5 HighJanuary 13, 2015
emc documentum wdkEMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for...CVE-2014-46395.0 MediumJanuary 7, 2015
libevent project libevent, debian linux +1 moreMultiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2...CVE-2015-6525Fix available7.5 HighJanuary 6, 2015
libevent project libevent, debian linux +1 moreMultiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0...CVE-2014-6272Fix available7.5 HighJanuary 6, 2015
pixman, canonical ubuntu linux +1 moreInteger overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6...CVE-2014-9766Fix available9.8 CriticalDecember 31, 2014
icu-project international components for unicode, apple mac os x, watchos +2 moreThe resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm...CVE-2014-8147Public exploitFix availableEPSS 23.6%7.5 HighDecember 31, 2014
facebook hiphop virtual machineInteger overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in...CVE-2014-62287.5 HighDecember 28, 2014
avast\! internet securityInteger overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local...CVE-2010-5075Public exploit2.1 LowDecember 28, 2014
google chromeInteger underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp...CVE-2011-17957.5 HighDecember 26, 2014
google chromeInteger overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters...CVE-2011-17947.5 HighDecember 26, 2014
ettercap-project ettercapInteger signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1...CVE-2014-9381Fix available5.0 MediumDecember 19, 2014
rpmInteger overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a...CVE-2014-8118Fix available10.0 HighDecember 14, 2014
trihedral vtscada, trihedral engineering vts +1 moreTrihedral Engineering Limited VTScada Integer OverflowCVE-2014-91927.8 December 11, 2014
adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreInteger overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on...CVE-2014-8449EPSS 14.4%10.0 HighDecember 10, 2014
jasper project jasperMultiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn...CVE-2014-9029Fix availableEPSS 18.2%7.5 HighDecember 4, 2014
redhat tcpdumpInteger underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode...CVE-2014-8767Fix available5.0 MediumNovember 20, 2014
google chromeInteger overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20...CVE-2014-7901Fix available7.5 HighNovember 19, 2014
google chromeeffects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a...CVE-2014-7909Fix available5.0 MediumNovember 19, 2014
google chromeMultiple integer overflows in the CheckMov function in media/base/container_names.cc in Google...CVE-2014-7908Fix available7.5 HighNovember 19, 2014
wireshark, oracle solaris +1 moreThe (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet...CVE-2015-3814Fix available5.0 MediumNovember 14, 2014
wireshark, debian linux, mageia +1 more +3 moreInteger overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF...CVE-2015-2191Fix available5.0 MediumNovember 14, 2014
wireshark, debian linux, mageia +2 more +4 moreOff-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in...CVE-2015-2189Fix available5.0 MediumNovember 14, 2014
wiresharkMultiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1...CVE-2014-8711Fix available5.0 MediumNovember 14, 2014
adobe air, air sdk, flash player +1 more +3 moreInteger overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188...CVE-2015-3087Public exploitFix availableEPSS 74.3%10.0 HighNovember 14, 2014
ffmpeglibavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2...CVE-2014-8549Fix available7.5 HighNovember 5, 2014
ffmpegInteger underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause...CVE-2014-8546Fix available7.5 HighNovember 5, 2014
ffmpeglibavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying...CVE-2014-8545Fix available7.5 HighNovember 5, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open