CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- gnome gdk-pixbuf, debian linux +1 moreMultiple integer overflows in the (1) pixops_composite_nearest, (2)...7.8 High
- php** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP...7.5 High
- google androidMultiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before...8.4 High
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error...7.5 High
- google androidMultiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5...7.8 High
- linux kernel, canonical ubuntu linux +1 moreInteger overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux...7.8 High
- mozilla firefoxInteger underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to...8.8 High
- qemuMultiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2...7.1 High
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreThe strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context...9.1 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreThe MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox...9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...6.5 Medium
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error...7.5 High
- phpMultiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers...7.3 High
- advantech webaccessInteger overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers...9.8 Critical
- mcafee application control, microsoft windows +1 moreThe swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1...6.6 Medium
- malaterre grassroots dicomInteger overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat...10.0 Critical
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12...6.2 Medium
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...8.8 High
- google chromeInteger overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in...8.8 High
- sambaThe ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP...5.3 Medium
- autodesk design reviewInteger overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to...6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla...6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in...6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in...7.5 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0...10.0 High
- apache subversionInteger overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9...8.6 High
- libpng, debian linux, fedoraproject fedora +4 more +6 moreInteger underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1...8.8 High
- microsoft windows 7, windows server 2008 +1 moreInteger underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows...9.3 High
- adobe air, air sdk, flash player +1 more +3 moreInteger overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and...9.3 High
- google chromeInteger overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used...7.5 High
- opensslThe ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote...5.0 Medium
- cyrus imap, opensuse leap, opensuse +2 moreInteger overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and...7.5 High
- cyrus imap, opensuse leap, opensuse +2 moreInteger overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and...7.5 High
- ffmpeg, canonical ubuntu linux +1 moreInteger overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2...6.8 Medium
- debian dpkg, canonical ubuntu linux +1 moreOff-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in...7.5 High
- canonical ubuntu linux, nvidia gpu driver +1 moreMultiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340...6.6 Medium
- google picasaInteger overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute...10.0 High
- simon tatham putty, opensuse leap, opensuse +2 moreInteger overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a...4.3 Medium
- google picasaInteger overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to...10.0 High
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreMultiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant...5.0 Medium
- libreswanThe pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS,...4.3 Medium
- mozilla firefox, network security services +1 moreInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...7.5 High
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote...6.8 Medium
- php, apple mac os x +1 moreOff-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5...6.8 Medium
- libav, opensuse leap, ubuntu +2 moreThe ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote...6.5 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...6.8 Medium
- google androidSampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider...10.0 High
- google androidInteger underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in...10.0 High
- Show moreLoading…