CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- [unknown] libexif, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of...6.1 Medium
- opencv, debian linux +1 moreInteger Overflow or Wraparound in OpenCV.8.8 High
- gnome gdk-pixbuf, canonical ubuntu linux, debian linux +2 moreGnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw...8.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship...7.8 High
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- gnu glibcThe malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block...8.1 High
- gnu binutilsThe dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc...7.8 High
- haxx curl, libcurl, debian linux +2 moreThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 Critical
- x libxcursor, canonical ubuntu linux, debian linux +2 morelibXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows...7.5 High
- google chrome, xmlsoft libxml2, debian linux +2 moreAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...8.8 High
- huawei technologies co., ltd. honor 9, huawei honor 9 firmware +1 moreThe Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford...7.8 High
- huawei technologies co., ltd. honor 8 pro, huawei honor 8 pro firmware +1 morehonor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier...6.5 Medium
- libxlsAn exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4...8.8 High
- optipng project optipng, debian linux +1 moreInteger overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to...7.8 High
- python, debian linux +1 moreCPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...9.8 Critical
- google androidA remote code execution vulnerability in the Android system (libutils). Product: Android....7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- libbpg project libbpgThe image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant...8.8 High
- gnu binutilsThe pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilscoffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...7.8 High
- gnu binutilsThe print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer...7.8 High
- gnu binutilsThe display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to...7.8 High
- swftoolsIn SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64...7.8 High
- sam2p project sam2pIn sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in...5.5 Medium
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...8.1 High
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...9.8 Critical
- google chrome, debian linux +1 moreAn integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to...8.8 High
- webkitgtk webkitgtk\+The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate...9.8 Critical
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- busybox, canonical ubuntu linux, debian linux +2 moreThe get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an...5.5 Medium
- artifex mupdfAn integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex...7.8 High
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function...9.8 Critical
- canonical ubuntu linux, cisco systems, inc. simple direct media, debian linux +1 more +3 moreAn exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5...8.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- exiv2There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image...5.5 Medium
- google androidInteger overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to...7.8 High
- google androidThe media_server component in Android allows remote attackers to cause a denial of service via a...5.5 Medium
- gnu binutilsThe *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as...7.8 High
- sam2p project sam2pBecause of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an...9.8 Critical
- micro focus visibrokerAn integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area,...9.8 Critical
- microfocus visibrokerAn integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability...7.5 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, while reading...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled...7.8 High
- sam2p project sam2pIn sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp...9.8 Critical
- Show moreLoading…