CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- gstreamer gst-plugins-good Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read 6.1 Medium
- signalwire freeswitch FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length 7.5 High
- thalesgroup safenet authentication client service Local privilege escalation in SafeNet Authentication Client SACSrv 7.3 High
- samsung exynos 1280, exynos 1380, exynos 1480 +7 more +9 more In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application... No score
- samsung exynos 1480, exynos 2400, samsung semiconductor exynos 1580 +3 more +5 more Integer overflow in NPU driver parameter processing due to insufficient bounds checking. No score
- cesnet ipfixcol2 CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin 8.3 High
- ibm mq IBM MQ is affected by a denial of service vulnerability 8.8 High
- ibm mq IBM MQ is affected by a denial of service vulnerability 7.1 High
- tanium client Tanium addressed a denial of service vulnerability in Tanium Client. 6.5 Medium
- google chrome Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had... 8.3 High
- mongodb c driver Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views 6.3 Medium
- netcore nbr100v2 Netcore NBR100V2 auto_ac msg_aes_dec integer overflow 8.7 High
- linuxfabrik monitoring-plugins Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary 7.0 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator 6.5 Medium
- amd compressionator sdk An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to... 6.9 Medium
- amd compressionator sdk An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local... 5.1 Medium
- postgresql psqlodbc psqlODBC does not validate column numbers and row indexes in binding and descriptor functions 7.5 High
- quickjs-ng QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort 8.3 High
- quickjs-ng QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration 8.5 High
- netpbm Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm 8.5 High
- netpbm Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam 8.5 High
- qt Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt 1.9 Low
- mediatek, inc. mediatek chipset In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead... 5.3 Medium
- google android In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an... 5.3 Medium
- google android In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer... 4.0 Medium
- google android In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer... 7.5 High
- google android In multiple locations, there is a possible out of bounds write due to an integer overflow. This... 8.4 High
- google android In parseContentType of PduParser.java, there is a possible denial of service due to an integer... 7.5 High
- google android In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow... 5.3 Medium
-
github.com/imgproxy/imgproxyGo,github.com/imgproxy/imgproxy/v2Go,github.com/imgproxy/imgproxy/v3Go +1 more +3 more imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution 9.8 Critical - tesseract-ocr tesseract Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions 5.5 Medium
- lejamon go-xrpl go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap) 3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service 6.5 Medium
- blender Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction 8.5 High
- blender Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache 8.5 High
- scribus Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling 8.5 High
- clickhouse, clickhouse cloud +1 more Unauthenticated RCE vulnerability against ClickHouse Server 9.5 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Gcc: integer wrap in `std 5.9 Medium
- imagination technologies graphics ddk GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet 7.1 High
- imagination technologies graphics ddk GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation 7.5 High
- google chrome Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to... 8.8 High
- mariadb-corporation mariadb-connector-j MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths 5.9 Medium
- digitalbazaar forge Forge: ASN.1 OID first arc truncation in asn1.oidToDer 3.7 Low
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 8.8 High
- apache software foundation kafka Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation 9.1 Critical
- juniper networks session smart router Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection 7.5 High
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 7.2 High
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 7.2 High
- libexpat libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes 8.2 High
- assimp Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow 6.9 Medium
- Show olderLoading…