Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

google androidMultiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android...CVE-2015-38639.3 HighOctober 1, 2015
google androidMultiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp...CVE-2015-38615.0 MediumOctober 1, 2015
google androidThe Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in...CVE-2015-383610.0 HighOctober 1, 2015
google androidMultiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in...CVE-2015-383410.0 HighOctober 1, 2015
google androidOff-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in...CVE-2015-3829EPSS 89.9%10.0 HighOctober 1, 2015
google androidThe MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android...CVE-2015-3828EPSS 85.4%10.0 HighOctober 1, 2015
google androidThe MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before...CVE-2015-3827EPSS 81.1%9.3 HighOctober 1, 2015
google androidThe MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android...CVE-2015-3826EPSS 73.6%5.0 MediumOctober 1, 2015
google androidMultiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright...CVE-2015-1539EPSS 85.8%10.0 HighOctober 1, 2015
google androidInteger overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in...CVE-2015-1538Public exploitEPSS 99.1%10.0 HighOctober 1, 2015
google androidInteger overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp...CVE-2015-15368.5 HighOctober 1, 2015
google androidInteger overflow in the native_handle_create function in libcutils/native_handle.c in Android...CVE-2015-1528Public exploit9.3 HighOctober 1, 2015
google androidInteger overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified...CVE-2014-791710.0 HighOctober 1, 2015
google androidInteger overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified...CVE-2014-791610.0 HighOctober 1, 2015
google androidInteger overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified...CVE-2014-791510.0 HighOctober 1, 2015
freeimage project freeimageMultiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote...CVE-2015-0852Fix available5.0 MediumSeptember 8, 2015
ffmpegMultiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in...CVE-2015-6819Fix available7.5 HighSeptember 6, 2015
apple iphone os, mac os x +1 moreInteger overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers...CVE-2015-37689.3 HighAugust 16, 2015
mozilla firefox, oracle solaris +1 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote...CVE-2015-4496Fix available9.3 HighAugust 16, 2015
perl, apple mac os x +1 moreInteger underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and...CVE-2013-7422Fix available7.5 HighAugust 16, 2015
microsoft office, word, word viewer +2 moreInteger underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT...CVE-2015-2470Public exploitEPSS 26.9%9.3 HighAugust 15, 2015
adobe air, air sdk, flash player +1 more +3 moreInteger overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202...CVE-2015-5560Public exploitFix availableEPSS 66.0%10.0 HighAugust 11, 2015
gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 MediumAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 HighAugust 11, 2015
mozilla firefox osInteger signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in...CVE-2015-59625.0 MediumAugust 8, 2015
xmltooling project xmltoolingXMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not...CVE-2015-0851Fix available5.0 MediumJuly 30, 2015
artifex afpl ghostscriptInteger overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and...CVE-2015-3228Fix available6.8 MediumJuly 24, 2015
google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 HighJuly 23, 2015
libunwind project libunwindOff-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows...CVE-2015-3239Public exploitFix available3.3 LowJuly 12, 2015
polkit project polkit, fedoraproject fedora, opensuse +2 moreInteger overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before...CVE-2015-4625Fix available4.6 MediumJuly 5, 2015
linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreInteger overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...CVE-2015-3279Fix available7.5 HighJuly 3, 2015
adobe bridge, photoshop cc +1 moreInteger overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11...CVE-2015-3110Public exploitEPSS 16.5%10.0 HighJune 24, 2015
libmspack project libmspackOff-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote...CVE-2015-4472Fix available6.8 MediumJune 11, 2015
libmspack project libmspackOff-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote...CVE-2015-4471Fix available4.3 MediumJune 11, 2015
libmspack project libmspackOff-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote...CVE-2015-4470Fix available4.3 MediumJune 11, 2015
libmspack project libmspackMultiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow...CVE-2015-4468Fix available4.3 MediumJune 11, 2015
libmspack project libmspackThe chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the...CVE-2015-4467Fix available4.3 MediumJune 11, 2015
adobe air, air sdk, flash player +2 more +4 moreInteger overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160...CVE-2015-3104Fix available10.0 HighJune 10, 2015
linux kernelThe oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in...CVE-2015-4003Fix available7.8 HighJune 7, 2015
linux kernelInteger signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in...CVE-2015-4001Fix available9.0 HighJune 7, 2015
debian linux, linux kernel, canonical ubuntu linux +2 moreThe udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate...CVE-2015-4167Fix available4.7 MediumJune 3, 2015
dell netvault backupInteger overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote...CVE-2015-406710.0 HighMay 29, 2015
wiresharkThe dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in...CVE-2015-3809Fix available7.8 HighMay 26, 2015
wiresharkThe dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in...CVE-2015-3808Fix available7.8 HighMay 26, 2015
google chrome, debian linux +1 moreGoogle Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate -...CVE-2015-1258Fix available7.5 HighMay 20, 2015
hancom hanword viewer 2007, hwp 2014, hwpviewer 2014 +1 more +3 moreInteger overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as...CVE-2015-28107.5 HighMay 15, 2015
dcraw project dcraw, fedoraproject fedora +1 moreInteger overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to...CVE-2015-3885Fix available4.3 MediumMay 13, 2015
mozilla firefox, opensuse +1 moreInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...CVE-2015-2717Fix available6.8 MediumMay 13, 2015
ibm dominoIBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to...CVE-2015-0135EPSS 39.8%10.0 HighApril 21, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open