CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead...7.8 High
- google androidIn libmediaextractor there is a possible out of bounds write due to an integer overflow. This...8.8 High
- line corporation line(android), linecorp line +1 moreInteger overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows...7.8 High
- apng-drawable 1.0.0 to 1.6.0, linecorp apng-drawable +1 moreInteger overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a...8.8 High
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 more +4 moresysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in...5.5 Medium
- kilo project kiloKilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation...7.5 High
- google androidIn binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write...7.8 High
- google androidIn NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible...5.5 Medium
- freedesktop popplerPoppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc.8.8 High
- nvidia clara genomics analysisClara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in...9.8 Critical
- libzetta-rs project libzetta-rslibZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that...7.5 High
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreVarious Lexmark products have an Integer Overflow.9.8 Critical
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...7.5 High
- openweave openweave-core, google nest cam iq indoor firmware +1 moreAn exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of...8.2 High
- google nest cam iq indoor firmwareAn exploitable denial-of-service vulnerability exists in the Weave certificate loading...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.5 High
- google androidIn phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write...7.8 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 more_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer...6.5 Medium
- exiv2In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage:...6.5 Medium
- google chromeInteger overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...6.5 Medium
- google chromeInteger overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...8.8 High
- nfdump project nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.17 and earlier is affected by an integer overflow in the function...7.5 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering function of...8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering functionality of...8.8 High
- gnu binutils, canonical ubuntu linux, netapp hci management node +2 more +4 moreapply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows...5.5 Medium
- linuxfoundation nats-serverInteger Overflow or Wraparound in NATS Server7.5 High
- upxAn Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap...7.8 High
- linux kernelIn the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreWhile storing calibrated data from firmware in cache, An integer overflow may occur since data...9.8 Critical
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32....5.5 Medium
- sweetscape 010 editorIn SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could...5.5 Medium
- freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 moreThe JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of...6.5 Medium
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A...4.9 Medium
- sleuthkit the sleuth kit, the sleuth kit sleuth kit, debian linux +1 more +3 moreThe Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted...6.5 Medium
- libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 moreIn libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c...8.1 High
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code...9.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution...9.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code...9.8 Critical
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- sound exchange project exchangeAn issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an...5.5 Medium
- evince team evince, canonical ubuntu linux, debian linux +1 more +3 moreEvince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...7.8 High
- canonical whoopsie, ubuntu linux +1 moreInteger overflow in whoopsie results in out-of-bounds heap write6.5 Medium
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4....8.8 High
- imagemagickImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function...7.8 High
- exiv2, fedoraproject fedora +1 moreA WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a...5.5 Medium
- exiv2, fedoraproject fedora +1 moreAn integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ...6.5 Medium
- exiv2, fedoraproject fedora +1 moreAn integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ...6.5 Medium
- Show moreLoading…