CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 High
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles...5.5 Medium
- libgit2, debian linux +1 moreInteger overflow in the index.c:read_entry() function while decompressing a compressed prefix...6.5 Medium
- teluu pjsip, debian linux +1 moreTeluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP...7.5 High
- memcached, canonical ubuntu linux, debian linux +1 more +3 morememcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free...7.5 High
- huawei technologies co., ltd. mha-al00a, huawei mha-al00a firmware +1 moreHuawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The...5.5 Medium
- huawei mate 9 pro, mate 9 pro firmware +1 moreHuawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer...7.8 High
- huawei dp300, dp300 firmware +1 moreHuawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An...5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to...7.8 High
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpd5.9 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moredwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- bj-tct kingviewKingView 7.5SP1 has an integer overflow during stgopenstorage API read operations.7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, in...7.8 High
- vncterm project vnctermAn issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the...9.8 Critical
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in...9.8 Critical
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2...9.8 Critical
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00,...5.3 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00,...4.3 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00,...4.3 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00,...4.3 Medium
- huawei ar3200, ar120-s firmware, ar1200 firmware +1 more +3 moreHuawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02,...7.5 High
- huawei ar3200, ar120-s firmware, ar1200 firmware +1 more +3 moreHuawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02,...7.5 High
- arm mbed tls, debian linux +1 moreIn ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK...9.8 Critical
- exiv2In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...7.8 High
- ccn-liteInteger overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context...9.8 Critical
- ccn-liteMultiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have...9.8 Critical
- gnu glibcThe malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on...9.8 Critical
- gnu binutilsIn GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section()...7.8 High
- gnu glibc, netapp cloud backup, data ontap edge +12 more +14 moreAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...5.5 Medium
- gnu binutilsThe elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd),...7.8 High
- libming, debian linux +1 moreThe outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable...8.8 High
- artifex mujsThe js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because...5.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Critical
- uclouvain openjpeg, canonical ubuntu linux, debian linux +2 moreIn OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the...6.5 Medium
- uclouvain openjpegIn OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function...6.5 Medium
- mit kerberosAn issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-...7.5 High
- google androidIn the sendFormatChange function of ACodec, there is a possible integer overflow which could lead...7.8 High
- google androidNVIDIA driver contains an integer overflow vulnerability which could cause a use after free and...7.8 High
- vmware fusion, workstation, workstation pro / player +2 moreVMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service...7.0 High
- podofo project podofoIn PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject:...5.5 Medium
- podofo project podofoIn PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream...5.5 Medium
- libming, debian linux +1 moreIn libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the...6.5 Medium
- embedthis goahead web serverEmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in...7.5 High
- Show moreLoading…