CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- matio project matio, fedoraproject fedora +1 moreMultiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73...9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1...6.5 Medium
- toaruos project toaruosAn integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel...7.8 High
- toaruos project toaruoskernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error...5.5 Medium
- libmingIn Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift)...6.5 Medium
- uclouvain openjpeg, debian linux +1 moreAn improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function...8.8 High
- google androidIn getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds...9.8 Critical
- corel paintshop pro 2019An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2...8.8 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segs7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote...8.8 High
- fujielectric v-serverFuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP...7.5 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...3.3 Low
- php, debian linux, opensuse leap +1 more +3 moreOut-of-bounds read in iconv.c4.2 Medium
- windriver vxworksWhen RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can...8.1 High
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreInteger overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote...8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +35 more +37 moreUntrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreUnchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +26 more +28 moreData length received from firmware is not validated against the max allowed size which can result...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...7.8 High
- linux kernelA flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel...7.1 High
- qemuQEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of...7.5 High
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 Low
- xiongmaitech besder ip20h1 firmwareAn issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras....6.5 Medium
- google androidIn CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to...9.8 Critical
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...7.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 427 firmware +11 more +13 moreIn case of using an invalid android verified boot signature with very large length, an integer...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote...8.8 High
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- hmtalk daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- google tensorflowInteger Overflow or Wraparound in Google TensorFlow9.8 Critical
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.8 High
- dropbox leptonread_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service ...5.5 Medium
- androidIn rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer...7.8 High
- lighttpd** DISPUTED ** lighttpd before 1.4.54 has a signed integer overflow, which might allow remote...9.8 Critical
- kmplayer, fedoraproject fedora +1 moreKMPlayer Subtitles parser Heap Overflow Vulnerability7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft chakracore, internet explorer, edge +2 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- teeworldsIn Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared...9.8 Critical
- teeworldsIn Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that...9.8 Critical
- oisf suricataSuricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can...9.8 Critical
- Show moreLoading…