CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- zapping-vbi zvbilibzvbi _vbi_strndup_iconv integer overflow5.3 Medium
- zapping-vbi zvbilibzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow6.9 Medium
- zapping-vbi zvbilibzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer6.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability7.8 High
- gpacGPAC lsr_dec.c lsr_translate_coords integer overflow6.3 Medium
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow6.3 Medium
- rockwellautomation micrologix 1100 b firmwareAn exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley...7.5 High
- gnu exosiphandle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content...7.5 High
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially...7.5 High
- f5 njsnjs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for...7.5 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...8.1 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 morekernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds...5.6 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9625 firmware +31 more +33 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine...7.8 High
- imagemagickOff-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of...5.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel...5.5 Medium
- openbsdInteger truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to...7.8 High
- libavlibavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash...5.5 Medium
- libavlibswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via...5.5 Medium
- libminglistmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file,...6.5 Medium
- phpThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...7.5 High
- treasuryxpress c2boxB.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers...7.5 High
- libavlibavcodec/mpegvideo_motion.c in libav 11.8 allows remote attackers to cause a denial of service ...5.5 Medium
- libavlibavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash)...5.5 Medium
- imagemagickOff-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified...9.8 Critical
- libtiffOff-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0...7.8 High
- game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 moregame-music-emu before 0.6.1 mishandles unspecified integer values.9.8 Critical
- google chromeA timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google...4.3 Medium
- openssl, oracle linux +1 moreThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 High
- libtiffThe TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows...9.1 Critical
- imagemagickOff-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of...6.5 Medium
- google androiddrivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5,...7.8 High
- wiresharkOff-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before...5.9 Medium
- google androidInteger overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver...7.8 High
- google androidMultiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016...7.8 High
- google androidInteger overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on...7.8 High
- google androidMultiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before...7.8 High
- google androidInteger overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on...7.8 High
- google androidapp/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does...7.8 High
- google androidarch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5...7.8 High
- google androidInteger overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07...7.8 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moremagick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of...5.5 Medium
- symantec advanced threat protection, csapi, endpoint protection +15 more +17 moreInteger overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced...9.8 Critical
- google androidMultiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4...8.4 High
- gnupg libksba, canonical ubuntu linux, opensuse leap +1 more +3 moreOff-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3...7.5 High
- openafs, debian linux +1 moreOff-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a...7.8 High
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 High
- linux kernelThe tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows...7.5 High
- Show moreLoading…