CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- lhasa project lhasa, debian linux, opensuse leap +1 more +3 moreInteger underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreMultiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS...7.8 High
- adobe air, air sdk, flash player +5 more +7 moreInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182...8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreInteger overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5...8.8 High
- gnu glibcInteger overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21...8.1 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreInteger overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar...5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreMultiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in...7.8 High
- pixmanAn integer overflow issue has been reported in the general_composite_rect() function in pixman...6.7 Medium
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...8.8 High
- redislabs redis, debian linux, opensuse leap +2 more +4 moreInteger overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x...7.5 High
- pcre perl compatible regular expression library, php +1 morePCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote...9.8 Critical
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows...7.3 High
- imagemagickInteger overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to...7.5 High
- ntp, netapp clustered data ontap, data ontap operating in 7-mode +3 more +5 moreAn integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation...7.5 High
- gnu glibcInteger overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka...8.1 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreInteger overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and...9.3 High
- squashfs project squashfs, fedoraproject fedora +1 moreInteger overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreInteger overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...4.6 Medium
- net-snmpThe snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the...7.5 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...6.8 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreInteger overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat...6.8 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreInteger overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat...10.0 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreInteger overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat...10.0 High
- gnu coreutilsInteger overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23...9.8 Critical
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle...7.5 High
- icoasoft potraceMultiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service ...5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters...7.5 High
- mindrot jbcrypt, fedoraproject fedora +1 moreInteger Overflow or Wraparound in JBCrypt5.0 Medium
- trihedral vtscada, trihedral engineering vts +1 moreTrihedral Engineering Limited VTScada Integer Overflow7.8
- adobe air sdk, flash player, air desktop runtime +4 more +6 moreInteger overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on...9.3 High
- gnu libgfortranMultiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code...9.8 Critical
- libavInteger overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9...8.8 High
- oberhumer liblzo2, lzo2 +1 moreInteger overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32...8.8 High
- ffmpegInteger overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x...8.8 High
- debian linux, oracle solaris, x.org x server +2 moreInteger overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka...6.5 Medium
- apache tomcatInteger Overflow or Wraparound in Apache Tomcat5.0 Medium
- rxspencer project rxspencer, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...6.8 Medium
- libpngMultiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial...5.0 Medium
- libpngInteger overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5...5.0 Medium
- google chromeInteger overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...7.5 High
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...6.2 Medium
- qemu, redhat enterprise linux +1 moreMultiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users...7.0 High
- armin burgmeier net6, opensuse, oracle solaris +2 moreInteger overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote...5.8 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 more** DISPUTED ** Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo...7.5 High
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...7.5 High
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreInteger overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server...6.9 Medium
- gimp, redhat enterprise linux +1 moreInteger overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in...6.8 Medium
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreInteger overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3,...9.3 High
- Show moreLoading…