CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google androidMultiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine...7.8 High
- google androidMultiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine...7.8 High
- libgd, php, debian linux +2 moreInteger overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka...9.8 Critical
- libdwarf project libdwarfInteger overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a...5.5 Medium
- adobe flash player, flash player desktop runtime +1 moreInteger overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162...8.8 High
- haxx libcurl, fedoraproject fedora +1 moreMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 Critical
- google androidInteger overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in...5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +6 more +8 moreInteger overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers...7.8 High
- phpZend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc...8.1 High
- libtiff, oracle vm server +1 moreMultiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba...7.8 High
- google chrome, opensuse leap +1 moreMultiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on...8.8 High
- google chrome, opensuse leap +1 moreMultiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in...8.8 High
- google chrome, opensuse leap +1 moreInteger overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in...8.8 High
- google android, linux kernel +1 moreMultiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm...9.8 Critical
- imagemagickInteger overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause...7.5 High
- qemu, debian linux, redhat openstack +1 more +3 moreInteger overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick...4.4 Medium
- google androidInteger underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on...7.8 High
- mozilla firefoxInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 High
- google chromeInteger overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in...8.8 High
- phpInteger overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38,...7.8 High
- apple mac os xInteger signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6...7.8 High
- libarchive, oracle linux +1 moreInteger overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to...8.6 High
- libgd, debian linux, opensuse leap +1 more +3 moreInteger overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics...6.5 Medium
- gnu libibertyInteger overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of...5.5 Medium
- gnu libibertyInteger overflow in the gnu_special function in libiberty allows remote attackers to cause a...5.5 Medium
- gnu libibertyInteger overflow in the string_appends function in cplus-dem.c in libiberty allows remote...7.8 High
- google android, linux kernel +1 moreThe MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm...7.8 High
- php, debian linux, opensuse leap +1 more +3 moreInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...9.8 Critical
- libgdInteger overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd)...8.8 High
- linux kernelInteger overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in...7.8 High
- imagemagick, oracle solaris +1 moreInteger overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to...9.8 Critical
- libarchive, oracle linux, solaris +7 more +9 moreInteger overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a...6.5 Medium
- phpMultiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before...9.8 Critical
- libgd, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...8.8 High
- libarchive, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in...7.8 High
- pythonInteger overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3...9.8 Critical
- openssl, hp icewall mcrp, icewall sso +3 more +5 moreOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 Critical
- mozilla netscape portable runtimeMultiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12...8.6 High
- phpInteger overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x...8.6 High
- phpInteger overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before...8.6 High
- phpInteger overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36...8.6 High
- php, opensuse leap, opensuse +2 moreInteger overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows...9.8 Critical
- phpInteger overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP...9.8 Critical
- phpInteger overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows...9.8 Critical
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...5.5 Medium
- linux kernel, google nexus 5x firmware, nexus 6p firmware +2 moreThe adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno...7.8 High
- libavformat project libavformatInteger overflow in the demuxer function in libmpdemux/demux_gif.c in Mplayer allows remote...5.5 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 High
- linux kernelInteger overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a...7.8 High
- phpMultiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote...9.8 Critical
- Show moreLoading…