CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c...9.8 Critical
- pngquantInteger overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows...7.8 High
- google androidInteger overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a...7.5 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone access control policy may potentially be bypassed in all Android releases from CAF...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability can potentially occur in all Android releases from...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability can potentially occur in all Android releases from...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone, an integer overflow vulnerability can potentially occur in all Android releases...7.8 High
- libraw libraw-demosaic-pack-gpl2An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw...9.8 Critical
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm sound driver could enable a local...7.0 High
- google androidA denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to...4.7 Medium
- google androidAn elevation of privilege vulnerability in Audioserver could enable a local malicious application...7.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- nvidia video driver, shield tablet firmware, shield tablet tk1 firmware +1 more +3 moreInteger overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3...7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac,...8.8 High
- oracle mysqlVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth...7.5 High
- novell groupwiseInteger overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot...9.8 Critical
- libimobiledevice libplistInteger overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before...5.5 Medium
- artifex ghostscriptInteger overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers...7.8 High
- artifex jbig2decArtifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the...7.1 High
- artifex jbig2decArtifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer...7.8 High
- artifex jbig2decArtifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application...7.1 High
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and...7.8 High
- libaacplus project libaacplusau_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might...7.8 High
- libtiffLibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local...7.0 High
- google androidAn elevation of privilege vulnerability in libnl could enable a local malicious application to...7.0 High
- arm trusted firmware project trusted firmwareIn ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying...5.9 Medium
- jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 moreAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper...5.5 Medium
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +3 more +5 moreHuawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00,...5.9 Medium
- huawei oceanstor 5800 v3 firmwareThe Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated...6.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10...7.8 High
- tigervncIn TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow,...6.5 Medium
- go-jose project go-joseInteger Overflow in go-jose7.5 High
- linux kernelThe vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux...7.8 High
- qemuInteger overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS...8.8 High
- jasper project jasperInteger overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a...5.5 Medium
- jasper project jasperMultiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2)...5.5 Medium
- jasper project jasperInteger overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before...7.8 High
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 Critical
- apng2gif project apng2gifAn issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based...7.5 High
- apng2gif project apng2gif, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based...7.5 High
- Show moreLoading…