CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 High
- spheredev minisphereminiSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize()...5.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations9.8 Critical
- sec project secThe sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token,...7.5 High
- tgtcoins target coinThe sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum...7.5 High
- substratumThe sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum...7.5 High
- intchain node tokenThe sell function of a smart contract implementation for Internet Node Token (INT), a tradable...7.5 High
- swft swftcoinThe sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum...7.5 High
- gold reward project rewardThe buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20...7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...7.5 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis...9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....6.5 Medium
- libbpg project libbpgThe restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other...8.8 High
- wpewebkit wpe webkit, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreThe getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo...8.8 High
- point-to-point protocol project protocol, canonical ubuntu linux +1 moreImproper input validation together with an integer overflow in the EAP-TLS protocol...9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out...8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of...8.8 High
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreThe value of fix_param->num_chans is received from firmware and if it is too large, an integer...7.8 High
- apple tv, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10...7.8 High
- google android, nvidia gpu display driver +1 moreIn Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible...7.8 High
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- samsung mobileA malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when...5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...8.8 High
- hexagontoken hexagonAn integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG...7.5 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...9.8 Critical
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +8 more +10 moreprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*...4.8 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...7.3 High
- koreashow project koreashowAn integer overflow in the transferMulti function of a smart contract implementation for...7.5 High
- social-chain social chainAn integer overflow in the transferMulti function of a smart contract implementation for Social...7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Critical
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 High
- google chrome, debian linux, google chromium v8 +4 more +6 moreInteger overflow in computing the required allocation size when instantiating a new javascript...8.8 High
- smartmeshAn integer overflow in the transferProxy function of a smart contract implementation for...7.5 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the Image loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the thumbnail functionality of the Blender open-source...7.5 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the animation playing functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the animation playing functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the bmp loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the DPX loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the DPX loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the IRIS loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the PNG loading functionality of the Blender open...8.8 High
- Show moreLoading…