CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- iceni argusAn exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus...8.8 High
- jhead project jheadThe ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to...7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- google chromeInteger overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...8.8 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 High
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...6.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...5.5 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A...7.5 High
- red hat spice-client, spice project spice +1 moreMultiple integer overflow and buffer overflow issues were discovered in spice-client's handling...7.6 High
- godotengine godotGodot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a...7.5 High
- pycryptodomePyCryptodome integer overflow vulnerability7.5 High
- bitcoin red project redAn integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin...7.5 High
- erc20token project erc20tokenAn integer overflow in the unprotected distributeToken function of a smart contract...7.5 High
- digitalcorpora tcpflow, canonical ubuntu linux +1 moreAn issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an...9.1 Critical
- suncontractThe mintTokens function of a smart contract implementation for SunContract, an Ethereum token,...7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x...7.5 High
- [unknown] ttembedCertain input files may trigger an integer overflow in ttembed input file processing. This...4.3 Medium
- php, netapp storage automation store +1 morePHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...9.8 Critical
- google android, linux kernel, canonical ubuntu linux +1 more +3 moreIn the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out...8.4 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInteger overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a...8.8 High
- libdxfrw project libdxfrwlibdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go...7.5 High
- mruby, debian linux +1 moreThe CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer...7.5 High
- stex white list project white listAn issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an...9.8 Critical
- encryptedtoken project encryptedtokenAn issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The...9.8 Critical
- mytoken project mytokenAn issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an...9.8 Critical
- myadvancedtoken project myadvancedtokenAn issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the...9.8 Critical
- techsmith mp4v2In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing...8.8 High
- clamav, canonical ubuntu linux, debian linux +2 moreClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted...5.5 Medium
- tractoThe increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum...9.8 Critical
- ngtoken project ngtokenAn integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token ...7.5 High
- malaysiancoin project malaysiancoinAn integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an...7.5 High
- globecoin project globecoinAn integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin ...7.5 High
- wmctoken project wmctokenAn integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an...7.5 High
- mp3 coin project coinAn integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an...7.5 High
- sharktech project sharktechAn integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an...7.5 High
- rocket coin project coinAn integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an...7.5 High
- libgit2, debian linux +1 moreA flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign...8.1 High
- jiucaitoken project jiucaitokenThe mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has...7.5 High
- entercoin project entercoinThe mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name:...7.5 High
- myylctoken project myylctokenThe mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an...7.5 High
- esh project eshThe mintToken function of a smart contract implementation for ESH, an Ethereum token, has an...7.5 High
- ylctoken project ylctokenThe mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an...7.5 High
- Show moreLoading…