CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- apple motionInteger overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote...5.0 Medium
- systemd project systemd, debian linux +1 moreInteger overflow in the valid_user_field function in journal/journald-native.c in systemd allows...7.5 High
- adobe acrobat, reader and acrobat, acrobat reader +6 more +8 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x...9.8 Critical
- microsoft publisherInteger overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary...9.3 High
- linux kernel, motorola android +1 moreInteger overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8...7.8 High
- adobe air, flash player, opensuse +6 more +8 moreInteger overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows...10.0 High
- google chrome, opus-codec opus, opensuse +2 moreInteger overflow in the padding implementation in the opus_packet_parse_impl function in src...5.0 Medium
- google chrome, opensuse +1 moreInteger overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364...7.5 High
- palemoon pale moon, redhat enterprise linux, enterprise virtualization +2 moreStack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other...9.8 Critical
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreInteger overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10...9.3 High
- google chrome, opensuse +1 moreInteger overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial...10.0 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreInteger overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before...10.0 High
- adobe flash playerInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before...8.8 High
- gimpInteger overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image...6.8 Medium
- gimpInteger overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and...6.8 Medium
- squashfs project squashfsInteger overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and...6.8 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...7.2 High
- adobe air, flash player, opensuse +6 more +8 moreInteger overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows...9.3 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreInteger overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5...7.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreMultiple integer overflows in sound/core/control.c in the ALSA control implementation in the...4.6 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise server +2 moreThe snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the...4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the...4.9 Medium
- google chromeSkia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of...6.8 Medium
- google chrome, libpng, debian linux +10 more +12 moreInteger signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,...6.8 Medium
- google chromeMultiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote...6.8 Medium
- google chrome, apple iphone os, mac os x +3 more +5 moreInteger overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers...6.8 Medium
- adobe reader, acrobat +1 moreInteger overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary...9.3 High
- linux kernel, canonical ubuntu linux +1 moreInteger overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the...7.8 High
- linux kernelInteger overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before...5.5 Medium
- microsoft windows 7, windows server 2008, windows vista +2 moreInteger overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008...10.0 High
- linux kernel, redhat enterprise linux +1 moreInteger overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on...5.5 Medium
- google chromeInteger overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers...7.5 High
- apple mac os x, quicktime +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- apple mac os x, quicktime +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute...6.8 Medium
- google android, android os +1 moreThe vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are...7.8 High
- gimpMultiple integer overflows in the load_image function in file-pcx.c in the Personal Computer...6.8 Medium
- google chromeMultiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google...7.5 High
- linux kernel, redhat enterprise linux, enterprise linux aus +4 more +6 moreInteger overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the...6.9 Medium
- google chromeMultiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a...6.8 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +5 more +7 moreMultiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before...4.9 Medium
- microsoft jscript, vbscript +1 moreMultiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6...9.3 High
- google chrome, apple iphone os, itunes +1 more +3 moreInteger overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of...7.5 High
- linux kernel, redhat enterprise linux desktop, enterprise linux eus +3 more +5 moreInteger overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the...6.9 Medium
- linux kernel, opensuse, suse linux enterprise high availability extension +1 more +3 moreInteger overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows...7.2 High
- linux kernel, fedoraproject fedora, opensuse +4 more +6 moreMultiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to...4.7 Medium
- linux kernel, opensuse, suse linux enterprise desktop +2 more +4 moreMultiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the ...6.9 Medium
- linux kernel, fedoraproject fedora, opensuse +4 more +6 moreInteger overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2...6.2 Medium
- google chrome, webmproject libvpx, redhat enterprise linux desktop +2 more +4 moreWebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44,...9.8 Critical
- google chromeMultiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to...9.8 Critical
- Show moreLoading…