CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows server 2008, windows server 2012, windows server 2016 +1 more +3 moreThe iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and...8.1 High
- capstone-engine capstoneCapstone Integer overflow8.8 High
- libplist project libplistThe parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to...5.0 Medium
- jasper project jasperInteger overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows...7.8 High
- audiofileInteger overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote...5.5 Medium
- audiofileInteger overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows...5.5 Medium
- freedesktop virglrendererInteger overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before...5.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...7.8 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial...5.5 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm camera driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- openbsdInteger overflow in the uvm_map_isavail function in uvm/uvm_map.c in OpenBSD 5.9 allows local...5.5 Medium
- openbsdInteger overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute...7.8 High
- podofo project podofoInteger overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have...7.8 High
- jasper project jasperInteger overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause...5.5 Medium
- jasper project jasperInteger overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a...5.5 Medium
- libavInteger overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a...5.5 Medium
- libdwarf project libdwarf(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow...9.8 Critical
- iceni argusAn exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to...8.8 High
- qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 moreInteger overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick...5.5 Medium
- vimAn integer overflow at an unserialize_uep memory allocation site would occur for vim before patch...9.8 Critical
- vimAn integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0...9.8 Critical
- tnef project tnef, debian linux +1 moreAn issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap...7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9....7.8 High
- linux kernelInteger overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the...7.8 High
- facebook hhvmInteger overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have...9.8 Critical
- facebook hhvmInteger overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified...9.8 Critical
- nvidia gpu display driver, gpu driver +1 moreAll versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer...8.8 High
- freebsdInteger overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured...7.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow...8.8 High
- vimvim before patch 8.0.0322 does not properly validate values for tree length when handling a spell...9.8 Critical
- busybox, canonical ubuntu linux, debian linux +2 moreInteger overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to...7.5 High
- google androidAn elevation of privilege vulnerability in the Framework APIs could enable a local malicious...7.8 High
- windriver vxworksInteger overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6...8.1 High
- gnome gtk-vnc, fedoraproject fedora +1 moreMultiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set...9.8 Critical
- linux kernelInteger overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore...7.8 High
- artifex mujs, fedoraproject fedora +1 moreInteger overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before...7.5 High
- webmproject libwebp, fedoraproject fedora +1 moreMultiple integer overflows in libwebp allows attackers to have unspecified impact via unknown...3.3 Low
- libquicktimeInteger overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows...7.8 High
- artifex mujsAn issue was discovered in Artifex Software, Inc. MuJS before...7.8 High
- artifex mujsAn issue was discovered in Artifex Software, Inc. MuJS before...7.8 High
- shadow project shadowInteger overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to...7.8 High
- tcpdumpThe ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c...9.8 Critical
- wiresharkIn Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop,...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite...7.5 High
- php, debian linux +1 moreInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...7.5 High
- ffmpegInteger overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0...9.8 Critical
- libavInteger overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a...5.5 Medium
- libavInteger overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause...5.5 Medium
- Show moreLoading…