CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- botan project botanIn Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which...9.8 Critical
- artifex mujsAn integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex...9.8 Critical
- powerdns authoritative, [unknown] pdns, debian linux +2 moreAn issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0...7.5 High
- google androidAn elevation of privilege vulnerability in the Framework APIs could enable a local malicious...7.8 High
- google androidAn information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could...7.8 High
- google android, linux kernel +1 moreInteger overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a...9.8 Critical
- php, netapp clustered data ontap +1 moreZend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that...9.8 Critical
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1...7.8 High
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to...8.8 High
- hancom office 2014When opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- linux kernelThe ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the...7.8 High
- artifex ghostscript, gpl ghostscript, jbig2dec +1 more +3 moreghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in...5.3 Medium
- libgdInteger overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote...7.8 High
- x.org libxpmMultiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM...9.8 Critical
- libtiffInteger overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0...7.8 High
- uclouvain openjpeg, the openjpeg project openjpeg2 +1 moreAn integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting...3.3 Low
- joyent smartosAn exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file...7.8 High
- joyent smartosAn exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file...7.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow...8.8 High
- google chromeInteger overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and...6.5 Medium
- jasper project jasperInteger overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows...7.8 High
- libtiffInteger overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a...7.4 High
- google chromeType confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and...6.3 Medium
- linux kerneldrivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function...7.8 High
- linux kerneldrivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass...7.8 High
- bdwgc project bdwgc, debian linux, opensuse leap +1 more +3 moreInteger overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of...9.8 Critical
- libtifftools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer()...9.8 Critical
- gstreamerInteger overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial...7.5 High
- mozilla firefox, debian linux, python +2 moreAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Critical
- samsung mobileInteger overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers...7.5 High
- python pillow, debian linux +1 morePillow Integer overflow in Map.c5.5 Medium
- memcachedAn integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for...8.1 High
- memcachedMultiple integer overflows in process_bin_update function in Memcached, which is responsible for...9.8 Critical
- memcachedAn integer overflow in the process_bin_append_prepend function in Memcached, which is responsible...9.8 Critical
- curl, haxx libcurl +1 moreThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 Low
- curlThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 Medium
- google androidOn Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so...9.8 Critical
- qemu, debian linux, opensuse leap +2 moreMultiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw...4.4 Medium
- cairographics cairoInteger overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a...5.5 Medium
- etalabs muslMultiple integer overflows in the TRE library and musl libc allow attackers to cause memory...9.8 Critical
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreInteger overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC...9.8 Critical
- x libxtst, fedoraproject fedora +1 moreMultiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of...9.8 Critical
- x.org libxrandr, fedoraproject fedora +1 moreMultiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out...9.8 Critical
- x.org libxi, fedoraproject fedora +1 moreMultiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial...7.5 High
- x.org libxfixes, fedoraproject fedora +1 moreInteger overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers...9.8 Critical
- Show moreLoading…