CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- sam2p project sam2pIn sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error,...7.5 High
- trustedfirmware trusted firmware-aThe BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write...7.0 High
- google androidInteger overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via...7.8 High
- gnu binutilsThe process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause...7.8 High
- qemu, debian linux +1 moreInteger overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick...8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might...6.5 Medium
- gnome gdk-pixbuf, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk...8.8 High
- gnu libidn2Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote...9.8 Critical
- gnu libidn2, debian linux +1 moreInteger overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows...9.8 Critical
- linux kernelAn integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx...4.4 Medium
- uclouvain openjpegInteger overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2...6.5 Medium
- mpg123Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5...5.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, an integer...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, an integer...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, an integer...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, an integer...9.8 Critical
- opencv, debian linux +1 moreInteger Overflow or Wraparound in OpenCV8.8 High
- opencv, debian linux +1 moreInteger Overflow or Wraparound in OpenCV8.8 High
- google androidA elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product:...7.8 High
- capnprotoInteger overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1...9.1 Critical
- varnish-cache varnish, varnish cache project cache, varnish-software varnish cache +2 moreAn issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0,...7.5 High
- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the handling of challenge packets in...6.5 Medium
- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the handling of security data in...6.5 Medium
- artifex ghostscript, debian linux +1 moreThe gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote...7.8 High
- linux kernelThe ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3...5.5 Medium
- genivia gsoapInteger overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used...8.1 High
- f5 nginx, apple xcode, puppet enterprise +2 moreNginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...7.5 High
- freedesktop popplerAn exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality...8.8 High
- google androidA remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1...7.8 High
- google androidA denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0...5.5 Medium
- gnu psppThere is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0...6.5 Medium
- debian linux, linux kernel, [unknown] kernel: +1 more +3 moreIn the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys...7.1 High
- libmtp project libmtpAn integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1...6.8 Medium
- libmtp project libmtpAn integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c...6.8 Medium
- matrixsslAn integer overflow vulnerability exists in the X509 certificate parsing functionality of...6.5 Medium
- rarlab unrar, sophos threat detection engine +1 moreA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...9.8 Critical
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler...7.8 High
- irfanviewAn exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of...8.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn the Secure File System in all Android releases from CAF using the Linux kernel, an Integer...7.8 High
- libmingThe readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote...6.5 Medium
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c...9.8 Critical
- Show moreLoading…