CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3,...9.3 High
- google chromeThe SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux...4.7 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 moreInteger overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel...7.2 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreInteger overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4...4.9 Medium
- google chromeThe WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer...10.0 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreInteger overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the...7.2 High
- mozilla firefox, seamonkey, thunderbird +4 more +6 moreInteger overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x...8.8 High
- freetype, apple mac os x, canonical ubuntu linux +1 more +3 moreInteger overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0...6.8 Medium
- python, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreMultiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2...5.0 Medium
- pythonInteger overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to...7.5 High
- adobe shockwave playerInteger overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to...8.8 High
- adobe shockwave playerMultiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to...8.8 High
- php, opensuse, suse linux enterprise +2 moreThe dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream,...9.8 Critical
- google chromeMultiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an...10.0 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in...9.3 High
- gimpInteger overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7...9.3 High
- gimpInteger overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might...9.3 High
- freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...7.5 High
- gimp, mozilla firefox, sun openjdk +1 more +3 moreMultiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in...9.3 High
- gstreamer, canonical ubuntu linux +1 moreInteger overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in...7.5 High
- pythonMultiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow...7.5 High
- net-snmpInteger overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5...5.0 Medium
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreInteger overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2,...7.2 High
- microsoft excel, excel viewer, office +3 more +5 moreInteger overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3,...9.3 High
- microsoft internet information servicesInteger overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet...9.0 High
- pythonMultiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2...5.0 Medium
- pythonMultiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have...7.5 High
- pythonMultiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreInteger overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the...4.9 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...10.0 High
- pythonMultiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers...6.8 Medium
- microsoft windows 2000, windows 2003 server, windows server 2008 +2 more +4 moreHeap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows...9.3 High
- apple cupsInteger overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on...6.8 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreInteger overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute...7.5 High
- pythonMultiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...5.8 Medium
- apache openoffice, sun staroffice, starsuite +2 more +4 moreInteger overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7,...9.3 High
- microsoft xml core servicesMicrosoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary...9.3 High
- apple cups, freedesktop poppler, gpdf project gpdf +3 more +5 moreInteger overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1)...6.8 Medium
- gimpMultiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted...6.8 Medium
- gimp, canonical ubuntu linux +1 moreInteger overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15...6.8 Medium
- microsoft exchange serverInteger overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote...7.8 High
- phpInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent...10.0 High
- grisoft avg antivirusMultiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to...7.5 High
- opera browserInteger overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via...7.5 High
- gnome gtk, gdkpixbuf +1 moreInteger overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause...7.5 High
- qmail project qmail, canonical ubuntu linux, debian linux +2 moreInteger overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms...9.8 Critical
- optical character recognition project character recognitionInteger overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library,...9.8 Critical
- gnome evolution, debian linux +1 moreInteger overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote...9.8 Critical
- linux kernelInteger overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux...7.8 High
- Show moreLoading…